Vulnerabilities > Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

DATE CVE VULNERABILITY TITLE RISK
2024-08-01 CVE-2024-39643 Cross-site Scripting vulnerability in Metagauss Registrationmagic
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RegistrationMagic Forms RegistrationMagic allows Stored XSS.This issue affects RegistrationMagic: from n/a through 6.0.0.1.
network
low complexity
metagauss CWE-79
6.1
2024-08-01 CVE-2024-39644 Cross-site Scripting vulnerability in Modernaweb Black Widgets for Elementor
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Modernaweb Studio Black Widgets For Elementor allows Stored XSS.This issue affects Black Widgets For Elementor: from n/a through 1.3.5.
network
low complexity
modernaweb CWE-79
5.4
2024-08-01 CVE-2024-39646 Cross-site Scripting vulnerability in Kunalnagar Custom 404 PRO
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kunal Nagar Custom 404 Pro allows Reflected XSS.This issue affects Custom 404 Pro: from n/a through 3.11.1.
network
low complexity
kunalnagar CWE-79
6.1
2024-08-01 CVE-2024-39647 Cross-site Scripting vulnerability in Kofimokome Message Filter for Contact Form 7
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kofi Mokome Message Filter for Contact Form 7 allows Reflected XSS.This issue affects Message Filter for Contact Form 7: from n/a through 1.6.1.1.
network
low complexity
kofimokome CWE-79
6.1
2024-08-01 CVE-2024-39667 Cross-site Scripting vulnerability in Bdthemes Element Pack
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 5.6.11.
network
low complexity
bdthemes CWE-79
5.4
2024-08-01 CVE-2024-39668 Cross-site Scripting vulnerability in Idioweb Extensions for Elementor
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in petesheppard84 Extensions for Elementor allows Stored XSS.This issue affects Extensions for Elementor: from n/a through 2.0.31.
network
low complexity
idioweb CWE-79
5.4
2024-08-01 CVE-2024-7368 Cross-site Scripting vulnerability in Oretnom23 Simple Realtime Quiz System 1.0
A vulnerability has been found in SourceCodester Simple Realtime Quiz System 1.0 and classified as problematic.
network
low complexity
oretnom23 CWE-79
5.4
2024-08-01 CVE-2024-4353 Cross-site Scripting vulnerability in Concretecms Concrete CMS
Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in the generate dashboard board instance functionality.
network
low complexity
concretecms CWE-79
4.8
2024-08-01 CVE-2024-7359 Cross-site Scripting vulnerability in Oretnom23 Tracking Monitoring Management System 1.0
A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0.
network
low complexity
oretnom23 CWE-79
6.1
2024-08-01 CVE-2024-2455 Cross-site Scripting vulnerability in Bdthemes Element Pack
The Element Pack - Addon for Elementor Page Builder WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget wrapper link URL in all versions up to, and including, 7.9.0 due to insufficient input sanitization and output escaping on user supplied attributes.
network
low complexity
bdthemes CWE-79
5.4