Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-51909 State: PUBLISHED Published: 2024-11-19T16:31:03.418Z Last Updated: 2024-11-20T14:26:18.765Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Monarkie Digital Content Solutions Products: audioCase Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Monarkie Digital Content Solutions audioCase allows DOM-Based XSS.This issue affects audioCase: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/audiocase/wordpress-audiocase-plugin-1-2-1-cross-site-scripting-xss-vulnerabilit
//patchstack.com/database/vulnerability/audiocase/wordpress-audiocase-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51910 State: PUBLISHED Published: 2024-11-19T16:31:02.880Z Last Updated: 2024-11-20T14:36:17.386Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Mauro Cordioli Products: Assist24 Help Desk Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mauro Cordioli Assist24 Help Desk allows DOM-Based XSS.This issue affects Assist24 Help Desk: from n/a through 20150401.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/assist24it/wordpress-assist24-help-desk-plugin-20150401-2-cross-site-scripting-xss-vulne
tack.com/database/vulnerability/assist24it/wordpress-assist24-help-desk-plugin-20150401-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51911 State: PUBLISHED Published: 2024-11-19T16:31:02.053Z Last Updated: 2024-11-20T14:36:17.476Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ketan Patel Products: Featured product by category name Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ketan Patel Featured product by category name allows DOM-Based XSS.This issue affects Featured product by category name: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/featured-product-by-category-name/wordpress-featured-pro
nt: References: - https://patchstack.com/database/vulnerability/featured-product-by-category-name/wordpress-featured-product-by-category-name-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51912 State: PUBLISHED Published: 2024-11-19T16:31:01.492Z Last Updated: 2024-11-20T14:36:17.587Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Lilaea Media Products: IntelliWidget Elements Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lilaea Media IntelliWidget Elements allows DOM-Based XSS.This issue affects IntelliWidget Elements: from n/a through 2.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/intelliwidget-elements/wordpress-intelliwidget-elements-plugin-2-2-7-cross-site-scrip
chstack.com/database/vulnerability/intelliwidget-elements/wordpress-intelliwidget-elements-plugin-2-2-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51913 State: PUBLISHED Published: 2024-11-19T16:31:00.941Z Last Updated: 2024-11-20T14:36:17.703Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Mapme Products: Mapme Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mapme Mapme allows Stored XSS.This issue affects Mapme: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/mapme/wordpress-mapme-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51914 State: PUBLISHED Published: 2024-11-19T16:31:00.432Z Last Updated: 2024-11-20T14:26:18.868Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Gopi Ramasamy Products: drop in image slideshow gallery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gopi Ramasamy drop in image slideshow gallery allows DOM-Based XSS.This issue affects drop in image slideshow gallery: from n/a through 12.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/drop-in-image-slideshow-gallery/wordpress-drop-in-image-s
t: References: - https://patchstack.com/database/vulnerability/drop-in-image-slideshow-gallery/wordpress-drop-in-image-slideshow-gallery-plugin-12-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51916 State: PUBLISHED Published: 2024-11-19T16:30:59.909Z Last Updated: 2024-11-20T14:26:18.983Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Creative Brahma Products: Multifox Plus Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Brahma Multifox Plus allows DOM-Based XSS.This issue affects Multifox Plus: from n/a through 1.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/multifox-plus/wordpress-multifox-plus-plugin-1-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51917 State: PUBLISHED Published: 2024-11-19T16:30:59.392Z Last Updated: 2024-11-20T14:26:19.122Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Huy Le Products: Multiple Votes in one page Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Huy Le Multiple Votes in one page allows Stored XSS.This issue affects Multiple Votes in one page: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/multiple-votes-in-one-page/wordpress-multiple-votes-in-one-page-plugin-1-0-4-cross-site-
tack.com/database/vulnerability/multiple-votes-in-one-page/wordpress-multiple-votes-in-one-page-plugin-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51918 State: PUBLISHED Published: 2024-11-19T16:30:58.883Z Last Updated: 2024-11-20T14:26:19.224Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Freshlight Lab Products: Pay With Stripe Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Freshlight Lab Pay With Stripe allows DOM-Based XSS.This issue affects Pay With Stripe: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/payments-stripe-gateway/wordpress-pay-with-stripe-plugin-1-2-1-cross-site-scripting-xss-vulnerability?
ase/vulnerability/payments-stripe-gateway/wordpress-pay-with-stripe-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51919 State: PUBLISHED Published: 2025-01-21T13:40:33.953Z Last Updated: 2025-01-21T15:49:38.830Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: NotFound Products: Fancy Product Designer Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Fancy Product Designer. This issue affects Fancy Product Designer: from n/a through 6.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fancy-product-designer/vulnerability/wordpress-fancy-product-designer-plugin-6-4-3-unauthenticated-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2024-51920 State: PUBLISHED Published: 2024-11-19T16:30:58.371Z Last Updated: 2024-11-20T14:26:19.316Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: JDev Products: Map Store Locator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JDev Map Store Locator allows DOM-Based XSS.This issue affects Map Store Locator: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/map-store-location/wordpress-map-store-locator-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51921 State: PUBLISHED Published: 2024-11-19T16:30:57.819Z Last Updated: 2024-11-20T14:26:19.446Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: midori Products: scrollup Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in midori scrollup allows DOM-Based XSS.This issue affects scrollup: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/scrollup/wordpress-scrollup-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51922 State: PUBLISHED Published: 2024-11-19T16:30:57.303Z Last Updated: 2024-11-20T14:26:19.561Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Maruf Arafat Products: VP Sitemap Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maruf Arafat VP Sitemap allows Stored XSS.This issue affects VP Sitemap: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/vp-sitemap/wordpress-vp-sitemap-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51923 State: PUBLISHED Published: 2024-11-19T16:30:56.778Z Last Updated: 2024-11-20T14:26:19.670Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Websand Products: Websand Subscription Form Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Websand Websand Subscription Form allows Stored XSS.This issue affects Websand Subscription Form: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/websand-subscription-form/wordpress-websand-subscription-form-plugin-1-0-3-cross-site-scr
ack.com/database/vulnerability/websand-subscription-form/wordpress-websand-subscription-form-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51924 State: PUBLISHED Published: 2024-11-19T16:30:56.251Z Last Updated: 2024-11-20T14:26:19.780Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Alexandre Magno Products: WP Agenda Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexandre Magno WP Agenda allows Stored XSS.This issue affects WP Agenda: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-agenda/wordpress-wp-agenda-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51925 State: PUBLISHED Published: 2024-11-19T16:30:55.670Z Last Updated: 2024-11-20T14:26:19.898Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Sazzad Hu Products: Testimonial Slider Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sazzad Hu Testimonial Slider Shortcode allows Stored XSS.This issue affects Testimonial Slider Shortcode: from n/a through 1.1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/testimonial-slider-shortcode/wordpress-testimonial-slider-shortcode-plugin-1
tps://patchstack.com/database/vulnerability/testimonial-slider-shortcode/wordpress-testimonial-slider-shortcode-plugin-1-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51926 State: PUBLISHED Published: 2024-11-19T16:30:55.144Z Last Updated: 2024-11-20T14:36:17.820Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Wpsoul Products: GreenCon Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpsoul GreenCon allows Stored XSS.This issue affects GreenCon: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/greencon/wordpress-greencon-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51927 State: PUBLISHED Published: 2024-11-19T16:30:54.502Z Last Updated: 2024-11-20T14:36:17.925Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Codember Products: Rig Elements For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codember Rig Elements For Elementor allows DOM-Based XSS.This issue affects Rig Elements For Elementor: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/rig-elements/wordpress-rig-elements-for-elementor-plugin-1-0-cross-site-scripting-x
atchstack.com/database/vulnerability/rig-elements/wordpress-rig-elements-for-elementor-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51928 State: PUBLISHED Published: 2024-11-19T16:30:53.914Z Last Updated: 2024-11-20T14:36:18.038Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jakir Hasan Products: Blocks Post Grid Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jakir Hasan Blocks Post Grid allows DOM-Based XSS.This issue affects Blocks Post Grid: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/blocks-post-grid/wordpress-blocks-post-grid-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51929 State: PUBLISHED Published: 2024-11-19T16:30:53.392Z Last Updated: 2024-11-20T14:36:18.224Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Phil Spectrum Products: Icon Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Phil Spectrum Icon Widget allows DOM-Based XSS.This issue affects Icon Widget: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/icon-widget-with-links/wordpress-icon-widget-plugin-1-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51930 State: PUBLISHED Published: 2024-11-19T16:30:52.870Z Last Updated: 2024-11-20T14:36:18.363Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jie Wang Products: Custom URL Shortener Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jie Wang Custom URL Shortener allows Stored XSS.This issue affects Custom URL Shortener: from n/a through 0.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/custom-url-shorter/wordpress-custom-url-shortener-plugin-0-3-6-cross-site-scripting-xss-vulnerability?
ase/vulnerability/custom-url-shorter/wordpress-custom-url-shortener-plugin-0-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51931 State: PUBLISHED Published: 2024-11-19T16:30:52.353Z Last Updated: 2024-11-20T15:16:27.956Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Marketever Products: AzonBox Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marketever AzonBox allows DOM-Based XSS.This issue affects AzonBox: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/azonbox/wordpress-azonbox-plugin-1-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51932 State: PUBLISHED Published: 2024-11-19T16:30:51.757Z Last Updated: 2024-11-20T15:16:28.122Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Saif Bin-Alam Products: Kings Tab Slider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saif Bin-Alam Kings Tab Slider allows DOM-Based XSS.This issue affects Kings Tab Slider: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/kings-tab-slider/wordpress-kings-tab-slider-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51933 State: PUBLISHED Published: 2024-11-19T16:30:51.182Z Last Updated: 2024-11-20T15:16:28.255Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Christian Ladewig Products: Cookie Nonsense for YT Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Christian Ladewig Cookie Nonsense for YT allows DOM-Based XSS.This issue affects Cookie Nonsense for YT: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/yt-cookie-nonsense/wordpress-cookie-nonsense-for-yt-plugin-1-2-0-cross-site
ttps://patchstack.com/database/vulnerability/yt-cookie-nonsense/wordpress-cookie-nonsense-for-yt-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51934 State: PUBLISHED Published: 2024-11-19T16:30:50.603Z Last Updated: 2024-11-20T15:16:28.363Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Uri Lazcano (Urielink) Products: Ekiline Block Collection Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uri Lazcano (Urielink) Ekiline Block Collection allows DOM-Based XSS.This issue affects Ekiline Block Collection: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ekiline-block-collection/wordpress-ekiline-block-collection
References: - https://patchstack.com/database/vulnerability/ekiline-block-collection/wordpress-ekiline-block-collection-plugin-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51935 State: PUBLISHED Published: 2024-11-19T16:30:50.072Z Last Updated: 2024-11-20T14:36:18.467Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Sam Perrow Products: Fast Video and Image Display Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sam Perrow Fast Video and Image Display allows DOM-Based XSS.This issue affects Fast Video and Image Display: from n/a through 2.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/fast-video-and-image-display/wordpress-fast-video-and-image-display-plu
- https://patchstack.com/database/vulnerability/fast-video-and-image-display/wordpress-fast-video-and-image-display-plugin-2-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51936 State: PUBLISHED Published: 2024-11-19T16:30:49.530Z Last Updated: 2024-11-20T14:36:18.572Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Henry Products: ESB Testimonials Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Henry ESB Testimonials allows Stored XSS.This issue affects ESB Testimonials: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/esb-testimonials/wordpress-esb-testimonials-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51937 State: PUBLISHED Published: 2024-11-19T16:30:49.022Z Last Updated: 2024-11-20T14:26:20.021Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Information Analytics Products: IA Map Analytics Basic Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Information Analytics IA Map Analytics Basic allows DOM-Based XSS.This issue affects IA Map Analytics Basic: from n/a through 20170413. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ia-map-analytics-basic/wordpress-ia-map-analytics-basic-plugin-2
rences: - https://patchstack.com/database/vulnerability/ia-map-analytics-basic/wordpress-ia-map-analytics-basic-plugin-20170413-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51938 State: PUBLISHED Published: 2024-11-19T16:30:48.496Z Last Updated: 2024-11-20T14:26:20.174Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NicheAddons Products: Charity Addon for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NicheAddons Charity Addon for Elementor allows DOM-Based XSS.This issue affects Charity Addon for Elementor: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/charity-addon-for-elementor/wordpress-charity-addon-for-elementor-plugin
- https://patchstack.com/database/vulnerability/charity-addon-for-elementor/wordpress-charity-addon-for-elementor-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51939 State: PUBLISHED Published: 2024-11-18T22:18:13.267Z Last Updated: 2024-11-19T14:01:50.599Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Santhosh veer Products: Stylish Internal Links Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Santhosh veer Stylish Internal Links allows DOM-Based XSS.This issue affects Stylish Internal Links: from n/a through 1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/stylish-internal-links/wordpress-stylish-internal-links-plugin-1-9-cross-site-
s://patchstack.com/database/vulnerability/stylish-internal-links/wordpress-stylish-internal-links-plugin-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-51940 State: PUBLISHED Published: 2024-11-18T22:17:07.542Z Last Updated: 2024-11-19T14:01:50.717Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: sohelwpexpert Products: WP Responsive Video Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in sohelwpexpert WP Responsive Video allows DOM-Based XSS.This issue affects WP Responsive Video: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/my-wp-responsive-video/wordpress-wp-responsive-video-plugin-1-0-cross-site-scripting-xs
stack.com/database/vulnerability/my-wp-responsive-video/wordpress-wp-responsive-video-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve