CVE-2025-53343

CVE-2025-53343 refers to a Missing Authorization vulnerability in the GoodLayers Modernize WordPress theme, affecting versions up to 3.4.0. The root cause is misconfigured access control security levels (broken authorization). Public sources indicate no patch is available (patch status listed as ...

WordPress plugin Modernize 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-33373 · Goodlayers · Goodlayers Modernize

Name of the Vulnerable Software and Affected Versions: GoodLayers Modernize versions through 3.4.0 Description: GoodLayers Modernize is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. The vulnerability allows for stored XSS...

PT-2025-33374 · Unknown · Goodlayers Modernize

Name of the Vulnerable Software and Affected Versions: GoodLayers Modernize versions through 3.4.0 Description: The software contains a missing authorization flaw that allows exploitation due to incorrectly configured access control security levels. Recommendations: Update GoodLayers Modernize to...

CVE-2025-51624

Cross-site scripting XSS vulnerability in Zone Bitaqati thru 3.4.0...

CVE-2025-51624

Cross-site scripting XSS vulnerability in Zone Bitaqati thru 3.4.0...

CVE-2025-51624

CVE-2025-51624 is a Cross-site scripting (XSS) vulnerability in Zone Bitaqati up to version 3.4.0. The available metrics show a CVSS v3.1 base score of 7.6 (HIGH) with NETWORK attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, UI:N, S:U, C:H, I:L, A:L. The vulnerability is exploitabl...

CVE-2025-51624

Cross-site scripting XSS vulnerability in Zone Bitaqati thru 3.4.0...

Zone Bitaqati 安全漏洞

Zone Bitaqati is an application from Zone Saudi Arabia. A security vulnerability exists in Zone Bitaqati version 3.4.0 and earlier, which stems from vulnerability to cross-site scripting attacks...

PT-2025-30882 · Silicon · Siwx91X

Name of the Vulnerable Software and Affected Versions: Silicon Labs SiWx91x versions prior to 3.4.0 Description: The APIs sl si91x aes, sl si91x gcm, sl si91x ccm, and sl si91x sha did not validate the size of the output buffer provided by the caller. This could result in data corruption on the...

CVE-2025-7207

Summary (CVE-2025-7207): A heap-based buffer overflow affects mruby up to 3.4.0-rc2, specifically the function scope_new in file mrbgems/mruby-compiler/core/codegen.c (component nregs Handler). The vulnerability can be triggered locally; an attack requires local access, and the exploit has been d...

mruby 安全漏洞

mruby is a lightweight implementation of the Ruby language. A security vulnerability exists in mruby 3.4.0-rc2 and earlier versions, which stems from a heap buffer overflow in the scopenew function...

CVE-2025-53368

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0, page descriptions are inserted into raw HTML without proper sanitization by the Citizen skin when using the old search bar. Any user with page editing privileges can insert...

CVE-2025-53370

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0, short descriptions set via the ShortDescription extension are inserted as raw HTML by the Citizen skin, allowing any user to insert arbitrary HTML into the DOM by editing a page...

CVE-2025-53368

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0, page descriptions are inserted into raw HTML without proper sanitization by the Citizen skin when using the old search bar. Any user with page editing privileges can insert...

CVE-2025-53370 Citizen stored XSS vulnerability through short descriptions

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0, short descriptions set via the ShortDescription extension are inserted as raw HTML by the Citizen skin, allowing any user to insert arbitrary HTML into the DOM by editing a page...

CVE-2025-53370

CVE-2025-53370 concerns the Citizen MediaWiki skin. Versions 1.9.4 up to 3.3.9 expose a stored XSS via the ShortDescription extension: the shortdesc is inserted into the DOM as raw HTML, enabling arbitrary HTML/JS execution by page edits. A patch exists in version 3.4.0. Public references and adv...

CVE-2025-53368 Citizen is vulnerable to stored XSS attack in the legacy search bar

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0, page descriptions are inserted into raw HTML without proper sanitization by the Citizen skin when using the old search bar. Any user with page editing privileges can insert...

CVE-2025-53368 Citizen is vulnerable to stored XSS attack in the legacy search bar

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0, page descriptions are inserted into raw HTML without proper sanitization by the Citizen skin when using the old search bar. Any user with page editing privileges can insert...

Citizen 跨站脚本漏洞

Citizen is a beautiful, easy-to-use and responsive MediaWiki skin from the Star Citizen Wiki team. A cross-site scripting vulnerability exists in Citizen versions prior to 1.9.4 through 3.4.0, which stems from page descriptions not being cleaned up correctly in the old search bar, and could lead ...