CVE-2025-24749 WordPress EZPZ SAML SP Single Sign On (SSO) plugin <= 1.2.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Overt Software Solutions LTD EZPZ SAML SP Single Sign On SSO allows Cross Site Request Forgery. This issue affects EZPZ SAML SP Single Sign On SSO: from n/a through 1.2.5...

CVE-2025-24749

CVE-2025-24749 affects the WordPress plugin EZPZ SAML SP Single Sign On (SSO) for versions 1.2.5 and earlier. The provided documents describe a CSRF vulnerability in this plugin, with PatchStack and CVE listings also noting a CSRF to Stored XSS vector. Root cause details are not explicitly enumer...

CVE-2025-24549 WordPress Post Meta plugin <= 1.0.9 - Reflected Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Mahbubur Rahman Post Meta post-meta allows Reflected XSS.This issue affects Post Meta: from n/a through = 1.0.9...

CVE-2025-23980 WordPress Full Circle plugin <= 0.5.7.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in James Andrews Full Circle full-circle allows Stored XSS.This issue affects Full Circle: from n/a through = 0.5.7.8...

CVE-2025-23978

CVE-2025-23978 details (FlashCounter WordPress plugin): CSRF leads to Stored XSS in FlashCounter, affecting versions up to 1.1.8. Connected sources confirm the vendor/plugin vulnerability and affected range, with no public patch/version fix provided in the supplied documents. Monitor for updates ...

CVE-2025-23980 WordPress Full Circle plugin <= 0.5.7.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in James Andrews Full Circle full-circle allows Stored XSS.This issue affects Full Circle: from n/a through = 0.5.7.8...

CVE-2025-23980

CVE-2025-23980 concerns the WordPress plugin Full Circle (versions up to 0.5.7.8). The connected sources describe a CSRF vulnerability that enables Stored XSS. The CVSS v3.1 base score is 7.1 (High) with Network attack vector, Low confidentiality/integrity/availability impacts, and user interacti...

CVE-2025-23989 WordPress Internal Link Builder plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Alessandro Piconi Internal Link Builder internal-link-builder allows Cross Site Request Forgery.This issue affects Internal Link Builder: from n/a through = 1.0...

CVE-2025-23978 WordPress FlashCounter plugin <= 1.1.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ninos FlashCounter flashcounter allows Stored XSS.This issue affects FlashCounter: from n/a through = 1.1.8...

CVE-2025-23990 WordPress Scroll Styler plugin <= 1.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in jablonczay Scroll Styler scroll-styler.This issue affects Scroll Styler: from n/a through = 1.1...

CVE-2025-23977 WordPress Post Carousel Slider plugin <= 2.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Bhaskar Dhote Post Carousel Slider post-carousel-slider allows Stored XSS.This issue affects Post Carousel Slider: from n/a through = 2.0.1...

CVE-2025-23976

CVE-2025-23976 : A CSRF to Stored XSS vulnerability exists in the WordPress plugin “Issuu Panel” (versions up to and including 2.1.1). Public sources (NVD/Red Hat) describe a CSRF flaw that enables stored XSS, affecting Issuu Panel releases

CVE-2025-23977

CVE-2025-23977 is a CSRF-to-Stored XSS vulnerability affecting the WordPress plugin “Post Carousel Slider” up to version 2.0.1. Connected sources (Red Hat, CIRCL, CVE listings, Patchstack, and vendor reports) corroborate that the issue is a Cross-Site Request Forgery that enables stored XSS in th...

Fedora 40 : lemonldap-ng (2025-07901b1995)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-07901b1995 advisory. - SecurityCVE-2024-52948 CSRF on 2FA registration - Security Open redirect vulnerability in logout Tenable has extracted the preceding description block...

Fedora 41 : lemonldap-ng (2025-3aa9a75a72)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3aa9a75a72 advisory. - SecurityCVE-2024-52948 CSRF on 2FA registration - Security Open redirect vulnerability in logout Tenable has extracted the preceding description block...

Fedora: Security Advisory (FEDORA-2025-07901b1995)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-5246 · Brainvireinfo · Brainvireinfo Dynamic Url Seo

Name of the Vulnerable Software and Affected Versions: Brainvireinfo Dynamic URL SEO versions 1.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended...

CVE-2025-24504

An improper input validation the CSRF filter results in unsanitized user input written to the application logs...

CVE-2025-24504

An improper input validation the CSRF filter results in unsanitized user input written to the application logs...

CVE-2025-24504

CVE-2025-24504 affects Broadcom Symantec Privileged Access Management . The root cause is an improper input validation in the CSRF filter , resulting in unsanitized user input being written to application logs . The provided documents do not specify exploitation details or a remediation/fix versi...