CVE-2025-31043

CVE-2025-31043 : JetSearch (WordPress plugin) has a DOM-based cross-site scripting (XSS) vulnerability in the JetSearch component due to improper input handling during web page generation. Affected: JetSearch versions up to 3.5.7 (requires authenticated access at Contributor+ level). Impact: stor...

PT-2025-13716

Name of the Vulnerable Software and Affected Versions Fusion versions 1.6.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker could potentially inject...

WordPress plugin Simple Owl Carousel 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

PT-2025-13721

Name of the Vulnerable Software and Affected Versions Aphotrax Uptime Robot Plugin for WordPress versions n/a through 2.3 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attack...

CVE-2025-31557: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MiKa OSM osm allows DOM-Based XSS.This issue affects OSM: from n/a through = 6.1.13...

PT-2025-13720

Name of the Vulnerable Software and Affected Versions Caspio Bridge Custom Database Applications by Caspio versions n/a through 2.1 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS. Th...

WordPress plugin JetSearch 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-13719

Name of the Vulnerable Software and Affected Versions MiKa OSM – OpenStreetMap versions n/a through 6.1.6 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject malicious...

PT-2025-13678

Name of the Vulnerable Software and Affected Versions tinuzz Trackserver versions n/a through 5.0.3 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This is a type of cross-site scripting vulnerability where the attac...

PT-2025-13767

Name of the Vulnerable Software and Affected Versions LABCAT Processing Projects versions 1.0.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker...

PT-2025-13711

Name of the Vulnerable Software and Affected Versions Twice Commerce versions 1.3.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker could potentially injec...

WordPress plugin Twice Commerce Twice Commerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. WordPress plugin Twice Commerce A...

PT-2025-13706

Name of the Vulnerable Software and Affected Versions Simple Owl Carousel versions 1.1.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker could potentially...

PT-2025-13691

Name of the Vulnerable Software and Affected Versions Themeix Churel versions 1.0.0 through 1.0.8 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This enables potential attackers to inject...

CVE-2025-31043: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSearch jet-search allows DOM-Based XSS.This issue affects JetSearch: from n/a through = 3.5.7...

CVE-2025-31624: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LABCAT Processing Projects processing-projects allows DOM-Based XSS.This issue affects Processing Projects: from n/a through = 1.0.2...

WordPress plugin JetSmartFilters 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-13662

Name of the Vulnerable Software and Affected Versions JetSearch versions 3.5.7 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS in JetSearch. This enables potential attackers...

CVE-2025-31549: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Agency Dominion Inc. Fusion fusion allows DOM-Based XSS.This issue affects Fusion: from n/a through = 1.6.4...

PT-2025-13687

Name of the Vulnerable Software and Affected Versions Crocoblock JetSmartFilters versions 3.6.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker...