CVE-2025-23852: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in robin90 First Comment Redirect first-comment-redirect allows Reflected XSS.This issue affects First Comment Redirect: from n/a through = 1.0.3...

PT-2025-9060

Name of the Vulnerable Software and Affected Versions Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons plugin for WordPress versions up to, and including, 26.0.0.1 Description The issue is related to Stor...

CVE-2025-1513: Improper Neutralization of Input During Web Page Generation

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Name and Comment field when commenting on photo gallery entries in all versio...

TOTOLINK CP450 Router DoS

The vulnerability of the setIpQosRules function in TOTOLINK CP450 router software lies in the issue of the operation exceeding the buffer in memory when processing the comment parameter. Exploiting this vulnerability could allow an attacker to cause service interruptions...

TOTOLINK CP450 Router DoS

The vulnerability of the setPortForwardRules function in TOTOLINK CP450 router microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the comment parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-56939

LearnDash v6.7.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the ld-comment-body class...

CVE-2024-56939

LearnDash v6.7.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the ld-comment-body class...

PT-2025-6731 · Learndash · Learndash

Name of the Vulnerable Software and Affected Versions: LearnDash version 6.7.1 Description: A stored Cross-Site Scripting XSS issue was found in the ld-comment-body class. This allows for malicious scripts to be stored and executed on the site, potentially affecting user sessions. Recommendations...

LearnDash 安全漏洞

LearnDash is a learning management system from LearnDash, Inc. A security vulnerability exists in LearnDash version v6.7.1, which stems from the ld-comment-body class containing a stored cross-site scripting vulnerability...

CVE-2024-56939: Improper Neutralization of Input During Web Page Generation

LearnDash v6.7.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the ld-comment-body class...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: “exec”: Do not issue warnings for theracy pathnoexec check. Both the imode and noexec checks, wrapped within WARNON, originate from an artifact of the previous implementation. They were originally used to properly check the...

CVE-2025-25154

Cross-Site Request Forgery CSRF vulnerability in scweber Custom Comment Notifications custom-comment-notifications allows Stored XSS.This issue affects Custom Comment Notifications: from n/a through = 1.0.8...

CVE-2025-25154

Cross-Site Request Forgery CSRF vulnerability in scweber Custom Comment Notifications custom-comment-notifications allows Stored XSS.This issue affects Custom Comment Notifications: from n/a through = 1.0.8...

CVE-2025-25154 WordPress Custom Comment Notifications plugin <= 1.0.8 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in scweber Custom Comment Notifications custom-comment-notifications allows Stored XSS.This issue affects Custom Comment Notifications: from n/a through = 1.0.8...

CVE-2025-25154 WordPress Custom Comment Notifications plugin <= 1.0.8 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in scweber Custom Comment Notifications allows Stored XSS. This issue affects Custom Comment Notifications: from n/a through 1.0.8...

CVE-2025-25154

CVE-2025-25154 refers to a CSRF to stored XSS vulnerability in the WordPress plugin Custom Comment Notifications by scweber, affecting versions 1.0.8 and earlier . The issue is triggered via Cross-Site Request Forgery enabling stored XSS payloads, with no exploitation details publicly provided in...

PT-2025-5962 · Unknown · Scweber Custom Comment Notifications

Name of the Vulnerable Software and Affected Versions: scweber Custom Comment Notifications versions 1.0.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a...

WordPress plugin Custom Comment Notifications 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-25154: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in scweber Custom Comment Notifications custom-comment-notifications allows Stored XSS.This issue affects Custom Comment Notifications: from n/a through = 1.0.8...

CVE-2020-36697

The WP GDPR plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in versions up to, and including, 2.1.1. This makes it possible for unauthenticated attackers to delete any comment and modify the plugin’s settings...