Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-06-21 CVE-2024-35758 Cross-site Scripting vulnerability in Themehorse Interface
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Theme Horse Interface allows Stored XSS.This issue affects Interface: from n/a through 3.1.0.
network
low complexity
themehorse CWE-79
5.4
2024-06-21 CVE-2024-35759 Cross-site Scripting vulnerability in Wpjobportal WP JOB Portal
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Job Portal allows Stored XSS.This issue affects WP Job Portal: from n/a through 2.1.3.
network
low complexity
wpjobportal CWE-79
4.8
2024-06-21 CVE-2024-35760 Cross-site Scripting vulnerability in Wpjobportal WP JOB Portal
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Job Portal allows Stored XSS.This issue affects WP Job Portal: from n/a through 2.1.3.
network
low complexity
wpjobportal CWE-79
4.8
2024-06-21 CVE-2024-35761 Cross-site Scripting vulnerability in Vcita Online Booking & Scheduling Calendar for Wordpress BY Vcita
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in vCita Online Booking & Scheduling Calendar for WordPress by vcita allows Stored XSS.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.4.0.
network
low complexity
vcita CWE-79
5.4
2024-06-21 CVE-2024-35762 Cross-site Scripting vulnerability in Cryoutcreations Serious Slider
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4.
network
low complexity
cryoutcreations CWE-79
5.4
2024-06-21 CVE-2024-35763 Cross-site Scripting vulnerability in Themefreesia Excellent
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Theme Freesia Excellent allows Stored XSS.This issue affects Excellent: from n/a through 1.2.9.
network
low complexity
themefreesia CWE-79
5.4
2024-06-21 CVE-2024-35764 Cross-site Scripting vulnerability in Church Admin Project Church Admin
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Andy Moyle Church Admin allows Stored XSS.This issue affects Church Admin: from n/a through 4.4.4.
network
low complexity
church-admin-project CWE-79
5.4
2024-06-21 CVE-2024-35766 Cross-site Scripting vulnerability in Wp-Pizza Wppizza
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ollybach WPPizza allows Reflected XSS.This issue affects WPPizza: from n/a through 3.18.13.
network
low complexity
wp-pizza CWE-79
6.1
2024-06-21 CVE-2024-35768 Cross-site Scripting vulnerability in Livecomposerplugin Live-Composer-Page-Builder
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Live Composer Team Page Builder: Live Composer allows Stored XSS.This issue affects Page Builder: Live Composer: from n/a through 1.5.42.
network
low complexity
livecomposerplugin CWE-79
4.8
2024-06-21 CVE-2024-35769 Cross-site Scripting vulnerability in Slideshow SE Project Slideshow SE
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in John West Slideshow SE allows Stored XSS.This issue affects Slideshow SE: from n/a through 2.5.17.
network
low complexity
slideshow-se-project CWE-79
4.8