CVE-2025-58820

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Carousel Ultimate carousel allows Stored XSS.This issue affects Carousel Ultimate: from n/a through = 1.8...

CVE-2025-58820 WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Carousel Ultimate carousel allows Stored XSS.This issue affects Carousel Ultimate: from n/a through = 1.8...

WordPress Dropcaps Shortcode and Widget plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Dropcaps Shortcode and Widget versions = 1.8...

Linux Distros Unpatched Vulnerability : CVE-2018-14329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack. CVE-2018-14329 Note that Nessus reli...

Linux Distros Unpatched Vulnerability : CVE-2019-11637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GNU recutils 1.8. There is a NULL pointer dereference in the function recrsetgetprops at rec-rset.c in librec.a, leading to a crash...

Linux Distros Unpatched Vulnerability : CVE-2019-6460

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function recfieldsetname in the file rec-field.c in librec.a...

Linux Distros Unpatched Vulnerability : CVE-2019-6459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GNU Recutils 1.8. There is a memory leak in recextracttype in rec-utils.c in librec.a. CVE-2019-6459 Note that Nessus relies on the...

Exploit for Cross-site Scripting in Totvs Fluig

FLUIG-Vulnerabilidade-CVE-2023-6275 Nov 24, 2023 — A vulnerabi...

CVE-2025-57891 WordPress Recurring PayPal Donations Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpecommerce Recurring PayPal Donations allows Stored XSS. This issue affects Recurring PayPal Donations: from n/a through 1.8...

CVE-2025-57891

CVE-2025-57891 affects the WordPress plugin “Recurring PayPal Donations” (wpecommerce) up to version 1.8. Root cause: improper neutralization of input during web page generation, enabling Stored Cross-Site Scripting (XSS). Impact as stated: stored XSS; exploitation status not detailed in the prov...

CVE-2025-57891 WordPress Recurring PayPal Donations Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpecommerce Recurring PayPal Donations recurring-donation allows Stored XSS.This issue affects Recurring PayPal Donations: from n/a through = 1.8...

Linux Distros Unpatched Vulnerability : CVE-2025-8736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the...

WordPress plugin Recurring PayPal Donations 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

PT-2025-34355 · Unknown · Wpecommerce Recurring Paypal Donations

Name of the Vulnerable Software and Affected Versions: wpecommerce Recurring PayPal Donations versions through 1.8 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update...

CVE-2025-49436 WordPress Custom Menu plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thiudis Custom Menu allows Stored XSS. This issue affects Custom Menu: from n/a through 1.8...

CVE-2025-49436

CVE-2025-49436 is associated with a WordPress Custom Menu plugin vulnerability reported in connected documents as a stored cross-site scripting (XSS) issue affecting the Custom Menu plugin up to version 1.8. The technical detail from the connected sources indicates that the flaw originates from i...

WordPress Plugin CaptionPix Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin CaptionPix 1.8 and earlier versions, whi...

cflow-1.8-2.1 on GA media (moderate)

cflow-1.8-2.1 on GA media Announcement ID: openSUSE-SU-2025:15459-1 Rating: moderate Cross-References: CVE-2023-6031 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the cflow-1.8-2.1 package o...

Linux Distros Unpatched Vulnerability : CVE-2023-23109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv...

Linux Distros Unpatched Vulnerability : CVE-2018-17197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika. CVE-2018-17197 Note...