CVE-2025-31433: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Miguel Sirvent Magic Embeds wp-embed-facebook allows Stored XSS.This issue affects Magic Embeds: from n/a through = 3.1.2...

CVE-2025-30900 WordPress Zoho Billing – Embed Payment Form plugin <= 4.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoho Subscriptions Zoho Billing – Embed Payment Form allows Stored XSS. This issue affects Zoho Billing – Embed Payment Form: from n/a through 4.0...

CVE-2025-30900

CVE-2025-30900 describes a stored cross-site scripting vulnerability in Zoho Subscriptions – Zoho Billing Embed Payment Form. The issue is caused by improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that are stored and later executed in ...

PT-2025-13150

Name of the Vulnerable Software and Affected Versions Zoho Billing – Embed Payment Form versions through 4.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the Zoho Billing – Embed...

WordPress plugin Zoho Billing – Embed Payment Form Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

CVE-2025-30900: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zoho Subscriptions Zoho Billing – Embed Payment Form allows Stored XSS. This issue affects Zoho Billing – Embed Payment Form: from n/a through 4.0...

asteroid (>=0.5.0rc0, <=0.5.0), backprop (>=0.0.3, <=0.1.3) +12 more potentially affected by CVE-2024-8019 via pytorch-lightning (1.2.10)

pytorch-lightning PYPI version 1.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.5.0rc0, =0.0.3, =0.3.0b1, =1.0.0, =0.3.1.0, =2.0.0, =1.0.4, =0.8.1, =1.0.0, =0.1.0, =0.2.0 Source cves:...

CVE-2024-8251

A vulnerability in mintplex-labs/anything-llm prior to version 1.2.2 allows for Prisma injection. The issue exists in the API endpoint "/embed/:embedId/stream-chat" where user-provided JSON is directly taken to the Prisma library's where clause. An attacker can exploit this by providing a special...

Anything-llm input validation error vulnerability

anything-llm is an all-in-one desktop and Docker AI application open-sourced by Mintplex. An input validation error vulnerability exists in versions prior to anything-llm 1.2.2, which stems from the presence of Prisma injection in the API endpoint /embed/:embedId/stream-chat, which allows an...

CVE-2024-8251: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in mintplex-labs/anything-llm prior to version 1.2.2 allows for Prisma injection. The issue exists in the API endpoint "/embed/:embedId/stream-chat" where user-provided JSON is directly taken to the Prisma library's where clause. An attacker can exploit this by providing a special...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in tomcat-embed-core

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of tomcat-embed-core Vulnerability Details CVEID:CVE-2024-56337 DESCRIPTION: Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 throu...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13555 more potentially affected by CVE-2025-24813 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.98)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-24813 Source advisory: GHSA-83QJ-6FR2-VHQG...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13555 more potentially affected by CVE-2025-24813 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.98)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-24813 Source advisory: OSV:GHSA-83QJ-6FR2-VHQG...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2025-24813 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2025-24813 Source...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2025-24813 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2025-24813 Source...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +6214 more potentially affected by CVE-2025-24813 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.34)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-24813 Source advisory: OSV:GHSA-83QJ-6FR2-VHQG...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +6214 more potentially affected by CVE-2025-24813 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.34)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-24813 Source advisory: GHSA-83QJ-6FR2-VHQG...

com.github.cafdataprocessing.services.staging:staging-service (>=3.3.0-1231, <=3.3.1-1249), com.github.cafdataprocessing.services.staging:staging-service-container (>=3.3.0-1231, <=3.3.1-1249) +33 more potentially affected by CVE-2025-24813 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.2)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =2.0.0-beta2, =2.0.0 and more Source cves: CVE-2025-24813 Source advisory: OSV:GHSA-83QJ-6FR2-VHQG...

com.github.cafdataprocessing.services.staging:staging-service (>=3.3.0-1231, <=3.3.1-1249), com.github.cafdataprocessing.services.staging:staging-service-container (>=3.3.0-1231, <=3.3.1-1249) +33 more potentially affected by CVE-2025-24813 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.2)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =2.0.0-beta2, =2.0.0 and more Source cves: CVE-2025-24813 Source advisory: GHSA-83QJ-6FR2-VHQG...

com.github.cafdataprocessing.services.staging:staging-service (>=3.3.0-1231, <=3.3.1-1249), com.github.cafdataprocessing.services.staging:staging-service-container (>=3.3.0-1231, <=3.3.1-1249) +33 more potentially affected by CVE-2025-24813 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.2)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =2.0.0-beta2, =2.0.0 and more Source cves: CVE-2025-24813 Source advisory: MEND:CVE-2025-24813...