CVE-2025-22525

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bharat Kambariya Donation Block For PayPal donations-block allows Stored XSS.This issue affects Donation Block For PayPal: from n/a through = 2.2.0...

CVE-2024-22525

dnspod-sr 0dfbd37 contains a SEGV...

CVE-2022-22525

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function...

CVE-2025-22525

creationtimestamp| type| source ---|---|--- 2025-01-07 16:18:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62ffnont25...

CVE-2025-22525 WordPress Donation Block For PayPal Plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bharat Kambariya Donation Block For PayPal donations-block allows Stored XSS.This issue affects Donation Block For PayPal: from n/a through = 2.2.0...

CVE-2025-22525

CVE-2025-22525 affects the Donation Block For PayPal WordPress plugin. It is described as an stored XSS vulnerability (Cross-site Scripting) due to improper neutralization of input during web page generation, impacting Donation Block For PayPal versions up to 2.2.0. The connected Red Hat/Wordfenc...

CVE-2024-22525

dnspod-sr 0dfbd37 contains a SEGV...

CVE-2024-22525

dnspod-sr 0dfbd37 contains a SEGV...

CVE-2024-22525

CVE-2024-22525 concerns the dnspod-sr package at version 0dfbd37, which contains a SEGV (segmentation fault). The CVSS data indicates a LOCAL attack vector with LOW privileges required and NO user interaction, resulting in a HIGH availability impact. Multiple connected sources corroborate that th...

CVE-2022-22525 Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function...

CVE-2022-22525

The CVE-2022-22525 affects Carlo Gavazzi UWP3.0 and CPY Car Park Server 2.8.3. It stems from missing input sanitization in the backup restore function, enabling a remote attacker with admin rights to execute arbitrary commands. Connections across sources consistently identify the affected compone...

CVE-2022-22525 Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an remote attacker with admin rights could execute arbitrary commands due to missing input sanitization in the backup restore function...

CVE-2022-22525

creationtimestamp| type| source ---|---|--- 2022-09-27 19:26:31+00:00| seen| https://t.me/truesecator/3479 2022-09-28 09:09:47+00:00| seen| https://t.me/icscert/615 2022-09-28 18:34:25+00:00| seen| https://t.me/cibsecurity/50594...

CVE-2021-22525

creationtimestamp| type| source ---|---|--- 2021-09-02 20:36:47+00:00| seen| https://t.me/cibsecurity/28230...

CVE-2021-22525

NetIQ Access Manager CVE-2021-22525 describes an information-leakage vulnerability in NAM prior to version 5.0.1. The root cause is insufficient privilege controls that can disclose sensitive information (confidentiality impact reported as HIGH in CVSS data). Affected product/component: NetIQ Acc...

ic.gc.ca XSS vulnerability

Vulnerable URL:...

CVE-2023-22525

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-22525

...