CVE-2026-63037

creationtimestamp| type| source ---|---|--- 2026-08-20 16:27:22+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/7w6o76reked64...

CVE-2026-63037

Apache InLong (versions 2.0.0 through before 2.4.0 ) is affected by an unauthenticated SQL injection vulnerability in the Manager OpenAPI audit alert rule list endpoint . The injection occurs in the ORDER BY clause against the Manager backend database, allowing an attacker to craft malicious sort...

CVE-2025-63037

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DFDevelopment Ronneby Theme Core ronneby-core allows DOM-Based XSS.This issue affects Ronneby Theme Core: from n/a through = 1.5.68...

CVE-2025-63037

creationtimestamp| type| source ---|---|--- 2025-12-09 15:36:49+00:00| seen| https://gist.github.com/Darkcrai86/3b5d7f79ca25d7247a59598bdaa4d627...

CVE-2025-63037

CVE-2025-63037 affects the WordPress Ronneby Theme Core (ronneby-core) plugin. The issue is a DOM-based XSS caused by improper neutralization of input during web page generation, affecting Ronneby Theme Core versions up to and including 1.5.68. The CVSS v3.1 base score is 6.5 (Medium) with networ...