1504 matches found
CVE-2025-48168 WordPress Apollo - Sticky Full Width HTML5 Audio Player <= 3.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Apollo - Sticky Full Width HTML5 Audio Player lbg-audio5-html5-shoutcast-sticky allows Reflected XSS.This issue affects Apollo - Sticky Full Width HTML5 Audio Player: from n/a through ...
CVE-2025-48168
CVE-2025-48168 applies to the WordPress plugin Apollo - Sticky Full Width HTML5 Audio Player. It describes a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Affected software/version: Apollo - Sticky Full Width HTML5 Audio ...
CVE-2025-48168 WordPress Apollo - Sticky Full Width HTML5 Audio Player <= 3.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Apollo - Sticky Full Width HTML5 Audio Player lbg-audio5-html5-shoutcast-sticky allows Reflected XSS.This issue affects Apollo - Sticky Full Width HTML5 Audio Player: from n/a through ...
PT-2025-33924 · Lambertgroup · Lambertgroup Apollo
Name of the Vulnerable Software and Affected Versions: LambertGroup Apollo - Sticky Full Width HTML5 Audio Player versions through 3.4 Description: This issue involves improper neutralization of input during web page generation, leading to a reflected cross-site scripting XSS condition...
CVE-2025-48168: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Apollo - Sticky Full Width HTML5 Audio Player lbg-audio5-html5-shoutcast-sticky allows Reflected XSS.This issue affects Apollo - Sticky Full Width HTML5 Audio Player: from n/a through ...
WordPress plugin Apollo - Sticky Full Width HTML5 Audio Player Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
Malicious code in apollo-auriga-eslint-config-version (npm)
The package apollo-auriga-eslint-config-version was found to contain malicious code...
Malicious code in apollo-gmail-grabber (npm)
The package apollo-gmail-grabber was found to contain malicious code...
Malicious code in apollo-nucleosynthesis-inflation-cassini (npm)
The package apollo-nucleosynthesis-inflation-cassini was found to contain malicious code...
Malicious code in apollo-regulus-commitizen-webdriverio (npm)
The package apollo-regulus-commitizen-webdriverio was found to contain malicious code...
Malicious code in apollo-spectron-cladistics-geochemistry (npm)
The package apollo-spectron-cladistics-geochemistry was found to contain malicious code...
Malicious code in archaeoastronomy-hugo-playwright-apollo (npm)
The package archaeoastronomy-hugo-playwright-apollo was found to contain malicious code...
Malicious code in async-apollo-standard-child-process (npm)
The package async-apollo-standard-child-process was found to contain malicious code...
Malicious code in auth-apollo-geckodriver-package (npm)
The package auth-apollo-geckodriver-package was found to contain malicious code...
Malicious code in biomimicry-supercluster-apollo-mutation (npm)
The package biomimicry-supercluster-apollo-mutation was found to contain malicious code...
Malicious code in cors-apollo-quantum-await (npm)
The package cors-apollo-quantum-await was found to contain malicious code...
Malicious code in element-ui-apollo-gatsby-process (npm)
The package element-ui-apollo-gatsby-process was found to contain malicious code...
Malicious code in event-on-apollo-vortex (npm)
The package event-on-apollo-vortex was found to contain malicious code...