Vulnerabilities > Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

DATE	CVE	VULNERABILITY TITLE	RISK
2024-12-30	CVE-2024-13034	Cross-site Scripting vulnerability in Code-Projects Chat System 1.0 A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. network low complexity code-projects CWE-79	7.6
2024-12-30	CVE-2024-13031	Cross-site Scripting vulnerability in Antabot White-Jotter A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. network low complexity antabot CWE-79	4.8
2024-12-24	CVE-2024-12268	The Responsive Blocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'responsive-block-editor-addons/portfolio' block in all versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping. network low complexity CWE-79	6.4
2024-12-24	CVE-2024-8721	The Tracking Code Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tracking code field in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. network low complexity CWE-79	6.4
2024-12-24	CVE-2024-11896	The Text Prompter – Unlimited chatgpt text prompts for openai tasks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'text_prompter' shortcode in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping on user supplied attributes. network low complexity CWE-79	6.4
2024-12-24	CVE-2024-12468	The WP Datepicker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpdp_get_selected_datepicker' parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping. network low complexity CWE-79	6.1
2024-12-24	CVE-2024-12814	The Loan Comparison plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'loancomparison' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. network low complexity CWE-79	6.4
2024-12-24	CVE-2024-11885	The NinjaTeam Chat for Telegram plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'njtele_button shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. network low complexity CWE-79	6.4
2024-12-24	CVE-2024-12100	The Bitcoin Lightning Publisher for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.4.1. network low complexity CWE-79	6.1
2024-12-24	CVE-2024-12405	The Export Customers Data plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 't' parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. network low complexity CWE-79	6.1