CVE-2025-28886

Cross-Site Request Forgery CSRF vulnerability in xjb REST API TO MiniProgram rest-api-to-miniprogram allows Cross Site Request Forgery.This issue affects REST API TO MiniProgram: from n/a through = 5.1.2...

PT-2025-5524 · Unknown · Gwolle Guestbook

Name of the Vulnerable Software and Affected Versions: Gwolle Guestbook versions through 4.7.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...