CVE-2025-47442: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CC CC BMI Calculator cc-bmi-calculator allows Stored XSS.This issue affects CC BMI Calculator: from n/a through = 2.1.0...

PT-2025-20080 · Unknown · Cc Bmi Calculator

Name of the Vulnerable Software and Affected Versions: CC BMI Calculator versions n/a through 2.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-9

CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-9. A patched version of the package is available...

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-9

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-9. A patched version of the package is available...

CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-11

CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-11. A patched version of the package is available...

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-11

CVE-2025-27144 affecting package moby-containerd-cc for versions less than 1.7.7-11. A patched version of the package is available...

CVE-2025-3511

This CVE (CVE-2025-3511) affects Mitsubishi Electric CC-Link IE TSN family modules (Remote I/O, A-D, D-A converters, FPGA, CP620 CP610 LSI, FX5 modules, and FX5-ENET/IP). Root cause: improper validation of specified quantity in input, enabling a remote, unauthenticated attacker to trigger a Denia...

PT-2025-17881

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module affected versions not specified Mitsubishi Electric Corporation CC-Link IE TSN Analog-Digital Converter module affected versions not specified Mitsubishi Electric Corporation...

CVE-2025-3511: Improper Validation of Specified Quantity in Input

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station...

Mitsubishi Electric多款产品 安全漏洞

Mitsubishi Electric CC-Link IE TSN Remote I/O module and others are products of Mitsubishi Electric Japan.Mitsubishi Electric CC-Link IE TSN Remote I/O module is an industrial Mitsubishi Electric CC-Link IE TSN Remote I/O module is a kind of industrial network technology, Remote I/O module is use...

CVE-2025-30735: Improper Access Control

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Page and Field Configuration. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2023-44487 affecting package kata-containers-cc for versions less than 0.6.1-2

CVE-2023-44487 affecting package kata-containers-cc for versions less than 0.6.1-2. A patched version of the package is available...

CVE-2025-1559

CVE-2025-1559 (CC-IMG-Shortcode for WordPress) is a stored XSS vulnerability in versions up to 1.1.0 of the CC-IMG-Shortcode plugin. It arises from insufficient input sanitization and output escaping on attributes of the plugin’s img shortcode, allowing an authenticated attacker with contributor-...

CVE-2025-1559 CC-IMG-Shortcode <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The CC-IMG-Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'img' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress plugin CC-IMG-Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-1559: Improper Neutralization of Input During Web Page Generation

The CC-IMG-Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'img' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress CC-IMG-Shortcode plugin <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin CC-IMG-Shortcode versions = 1.1.0...

myredemption.cc Cross Site Scripting vulnerability OBB-4034394

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cityteam.cc Cross Site Scripting vulnerability OBB-4033056

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-28180 affecting package moby-containerd-cc for versions less than 1.7.7-6

CVE-2024-28180 affecting package moby-containerd-cc for versions less than 1.7.7-6. A patched version of the package is available...