CVE-2025-28096

OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...

CVE-2025-28090

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF in the Collection Custom Interface feature...

CVE-2025-30856

Cross-Site Request Forgery CSRF vulnerability in theme funda Custom Field For WP Job Manager custom-field-for-wp-job-manager allows Cross Site Request Forgery.This issue affects Custom Field For WP Job Manager: from n/a through = 1.4...

CVE-2025-30888

Cross-Site Request Forgery CSRF vulnerability in silverplugins217 Custom Fields Account Registration For Woocommerce custom-fields-account-registration-for-woocommerce allows Cross Site Request Forgery.This issue affects Custom Fields Account Registration For Woocommerce: from n/a through = 1.1...

CVE-2025-30822

Cross-Site Request Forgery CSRF vulnerability in Hakik Zaman Custom Login Logo ideal-wp-login-logo-changer allows Cross Site Request Forgery.This issue affects Custom Login Logo: from n/a through = 1.1.7...

CVE-2025-28097

OneNav 1.1.0 is vulnerable to Cross Site Scripting XSS in custom headers...

CVE-2025-28096

OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...

CVE-2025-28090

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF in the Collection Custom Interface feature...

CVE-2025-28889

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in starblank Custom Product Stickers for Woocommerce custom-product-stickers-for-woocommerce allows Reflected XSS.This issue affects Custom Product Stickers for Woocommerce: from n/a through = 1.9.0...

CVE-2025-28917

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crazyloong Custom Smilies custom-smilies-se allows Stored XSS.This issue affects Custom Smilies: from n/a through = 2.9.2...

PT-2025-13592

Name of the Vulnerable Software and Affected Versions OneNav version 1.1.0 Description The issue is related to Cross Site Scripting XSS in custom headers. This means that an attacker could potentially inject malicious scripts into the headers of the OneNav application, which could then be execute...

CVE-2025-28097

OneNav 1.1.0 is vulnerable to Cross Site Scripting XSS in custom headers...

PT-2025-13584

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.193 Description The issue allows attackers with admin privileges to conduct Cross-Site Scripting XSS attacks against every page by setting menu custom right link html parameters via the UI. Recommendations For versio...

PT-2025-13583

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.193 Description The issue allows attackers with admin privileges to conduct Cross-Site Scripting XSS attacks via a global menu link. This is possible because menu custom right link parameters can be set via the UI...

PT-2025-13587 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 version 2025.1000.4047 Description: The issue is related to Server-Side Request Forgery SSRF in the Collection Custom Interface feature. This allows an attacker to trick the server into making unintended requests. Recommendations: Fo...

CVE-2025-28097: Improper Neutralization of Input During Web Page Generation

OneNav 1.1.0 is vulnerable to Cross Site Scripting XSS in custom headers...

CVE-2025-28096: Server-Side Request Forgery (SSRF)

OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...

CVE-2025-28090: Server-Side Request Forgery (SSRF)

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery SSRF in the Collection Custom Interface feature...

CVE-2025-28097

OneNav 1.1.0 is vulnerable to Cross Site Scripting XSS in custom headers...

CVE-2025-28096

OneNav version 1.1.0 , a bookmark management tool, is vulnerable to Server-Side Request Forgery (SSRF) due to an issue in custom headers . This flaw could allow an attacker to force the server to make requests to arbitrary domains, potentially resulting in unauthorized access to sensitive data or...