GHSA-HC76-7MPC-QJQH ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797

An incomplete fix of CVE-2026-25797 can result in code injection in the HTML encoder...

CVE-2026-25797

creationtimestamp| type| source ---|---|--- 2026-03-30 07:02:33+00:00| seen| https://infosec.exchange/users/certvde/statuses/116316841599408182...

ROOT-OS-DEBIAN-12-CVE-2026-25797 CVE-2026-25797 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-25797 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available...

[SECURITY] [DLA 4497-1] imagemagick security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4497-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès March 11, 2026 https://wiki.debian.org/LTS -...

Debian dsa-6159 : imagemagick - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6159 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6159-1 [email protected] https://www.debian.org/securit...

CVE-2026-25797 ImageMagick vulnerable to Code injection via PostScript header in ps coders

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

CVE-2020-25797

LimeSurvey 3.21.1 is affected by cross-site scripting XSS in the Add Participants Function First and last name parameters. When the survey participant being edited, e.g. by an administrative user, the JavaScript code will be executed in the browser...

CVE-2025-25797

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminsmtp.php...

CVE-2025-25797

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminsmtp.php...

CVE-2025-25797

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminsmtp.php...

CVE-2023-25797

Auth. Stored Cross-Site Scripting XSS vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin = 4.1.2 versions...

CVE-2023-25797

CVE-2023-25797 affects WordPress plugin vSlider Multi Image Slider for WordPress (

WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Scripting (XSS)

Software vSlider Multi Image Slider for WordPress Type Plugin Vulnerable versions = 4.1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25797 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 7d1d8d3cc565 Credits...

CVE-2022-25797

CVE-2022-25797 affects Autodesk AutoCAD 2019–2022 where a crafted PDF can trigger a buffer-overflow when parsing, due to improper handling that leads to an unhandled exception. The issue is tied to the PDF-parsing path in AutoCAD/TrueView, with confirmed impact described as a write beyond the all...

LimeSurvey < 3.21.2 Multiple XSS Vulnerabilities

LimeSurvey is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2020-25797

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Add Participants Function (First and last name parameters). The vulnerability arises when an administrative user edits a participant, causing injected JavaScript to execute in the browser. Multiple connected sources corroborate th...