Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•3 views

CVE-2025-67543: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Catch Themes Essential Widgets essential-widgets allows Stored XSS.This issue affects Essential Widgets: from n/a through = 2.2.2...

6.5CVSS5.8AI score0.00196EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•16 views

PT-2025-49919

Name of the Vulnerable Software and Affected Versions Catch Themes Essential Widgets versions through 2.2.2 Description A flaw exists in Catch Themes Essential Widgets that allows for Stored Cross-site Scripting XSS. This issue occurs due to improper neutralization of input during web page...

6.5CVSS6AI score0.00196EPSS
SaveExploits0References3
Rows per page
Query Builder