| 2024-12-10 | CVE-2024-49550 | Cross-site Scripting vulnerability in Adobe Connect
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. | 6.1 |
| 2024-12-10 | CVE-2024-54039 | Cross-site Scripting vulnerability in Adobe Connect
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. | 5.4 |
| 2024-12-10 | CVE-2024-54040 | Cross-site Scripting vulnerability in Adobe Connect
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. | 5.4 |
| 2024-12-10 | CVE-2024-54041 | Cross-site Scripting vulnerability in Adobe Connect
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. | 5.4 |
| 2024-12-10 | CVE-2024-54049 | Cross-site Scripting vulnerability in Adobe Connect
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. | 6.1 |
| 2024-12-10 | CVE-2024-12323 | The turboSMTP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 4.6 due to insufficient input sanitization and output escaping. | 6.1 |
| 2024-12-10 | CVE-2024-47117 | IBM Carbon Design System (Carbon Charts 0.4.0 through 1.13.16) is vulnerable to cross-site scripting. | 5.4 |
| 2024-12-10 | CVE-2024-11928 | The iChart – Easy Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. | 6.4 |
| 2024-12-10 | CVE-2024-11945 | The Email Reminders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. | 6.4 |
| 2024-12-10 | CVE-2024-11973 | The Quran multilanguage Text & Audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sourate' and 'lang' parameter in all versions up to, and including, 2.3.21 due to insufficient input sanitization and output escaping. | 6.1 |