# CVEs published 2024-11-02

12 CVEs were published on November 2, 2024: 0 critical, 2 high. Days are UTC.

- [CVE-2024-10702](https://cve.now/CVE-2024-10702.md): code-projects Simple Car Rental System signup.php sql injection (CVSS 6.9, code-projects Simple Car Rental System)
- [CVE-2024-10701](https://cve.now/CVE-2024-10701.md): PHPGurukul Car Rental Portal search.php cross site scripting (CVSS 5.3, PHPGurukul Car Rental Portal)
- [CVE-2024-10700](https://cve.now/CVE-2024-10700.md): code-projects University Event Management System submit.php sql injection (CVSS 5.3, code-projects University Event Management System)
- [CVE-2024-10699](https://cve.now/CVE-2024-10699.md): code-projects Wazifa System logincontrol.php sql injection (CVSS 6.9, code-projects Wazifa System)
- [CVE-2024-10698](https://cve.now/CVE-2024-10698.md): Tenda AC6 SetOnlineDevName formSetDeviceName stack-based overflow (CVSS 8.7, Tenda AC6)
- [CVE-2024-10697](https://cve.now/CVE-2024-10697.md): Tenda AC6 API Endpoint WriteFacMac formWriteFacMac command injection (CVSS 5.3, Tenda AC6)
- [CVE-2024-9896](https://cve.now/CVE-2024-9896.md): BBP Core – Expand bbPress powered forums with useful features \<= 1.2.5 - Reflected Cross-Site Scripting via add\_query\_arg Parameter (CVSS 6.1, spiderdevs Forumax – AI Powered Advanced Community Forum Pl…)
- [CVE-2024-9868](https://cve.now/CVE-2024-9868.md): Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) \<= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate (CVSS 5.4, bdthemes Element Pack – Widgets, Templates & Addons for Ele…)
- [CVE-2024-8739](https://cve.now/CVE-2024-8739.md): ReCaptcha Integration for WordPress \<= 1.2.5 - Reflected Cross-Site Scripting (CVSS 6.1, wedevs ReCaptcha Integration for WordPress)
- [CVE-2024-10540](https://cve.now/CVE-2024-10540.md): Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress \<= 1.1.16 - Authenticated (Subscriber+) SQL Injection (CVSS 5.3, reputeinfosystems Appointment Booking Calendar Plugin and S…)
- [CVE-2024-10310](https://cve.now/CVE-2024-10310.md): Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) \<= 5.10.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Gallery Widget (CVSS 6.4, bdthemes Element Pack – Widgets, Templates & Addons for Ele…)
- [CVE-2024-51774](https://cve.now/CVE-2024-51774.md): qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors. (CVSS 8.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-11-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.