Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2024-09-17 CVE-2024-44047 Cross-site Scripting vulnerability in Idxbroker Impress for IDX Broker
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in IDX Broker IMPress for IDX Broker allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through 3.2.2.
network
low complexity
idxbroker CWE-79
5.4
2024-09-17 CVE-2024-44049 Cross-site Scripting vulnerability in Themehunk Gutenberg Blocks
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeHunk Gutenberg Blocks – Unlimited blocks For Gutenberg allows Stored XSS.This issue affects Gutenberg Blocks – Unlimited blocks For Gutenberg: from n/a through 1.2.7.
network
low complexity
themehunk CWE-79
5.4
2024-09-17 CVE-2024-44050 Cross-site Scripting vulnerability in Cryoutcreations Verbosa
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Verbosa allows Stored XSS.This issue affects Verbosa: from n/a through 1.2.3.
network
low complexity
cryoutcreations CWE-79
5.4
2024-09-17 CVE-2024-44051 Cross-site Scripting vulnerability in Vanderwijk Content Blocks
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Johan van der Wijk Content Blocks (Custom Post Widget) allows Stored XSS.This issue affects Content Blocks (Custom Post Widget): from n/a through 3.3.5.
network
low complexity
vanderwijk CWE-79
5.4
2024-09-17 CVE-2024-44064 Cross-Site Request Forgery (CSRF) vulnerability in Likebtn Like Button Rating
Cross-Site Request Forgery (CSRF) vulnerability in LikeBtn Like Button Rating allows Cross-Site Scripting (XSS).This issue affects Like Button Rating: from n/a through 2.6.54.
network
low complexity
likebtn CWE-352
6.1
2024-09-17 CVE-2024-45451 Cross-site Scripting vulnerability in Cryoutcreations Roseta
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Roseta allows Stored XSS.This issue affects Roseta: from n/a through 1.3.0.
network
low complexity
cryoutcreations CWE-79
5.4
2024-09-17 CVE-2024-45452 Cross-site Scripting vulnerability in Cryoutcreations Septera
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Septera septera allows Stored XSS.This issue affects Septera: from n/a through 1.5.1.
network
low complexity
cryoutcreations CWE-79
5.4
2024-09-17 CVE-2024-45815 Unspecified vulnerability in Backstage
Backstage is an open framework for building developer portals.
network
low complexity
backstage
6.5
2024-09-17 CVE-2024-45816 Path Traversal vulnerability in Backstage
Backstage is an open framework for building developer portals.
network
low complexity
backstage CWE-22
6.5
2024-09-17 CVE-2024-46976 Cross-site Scripting vulnerability in Backstage
Backstage is an open framework for building developer portals.
network
low complexity
backstage CWE-79
5.4