CVE-2025-27265

CVE-2025-27265 corresponds to a DOM-based XSS in Google Maps for WordPress (WordPress plugin) affecting versions up to 1.0.3. The issue is described in connected sources as an Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability caused by improper input neutralization during web...

PT-2025-7752 · WordPress · Woocommerce Display Products By Tags

Name of the Vulnerable Software and Affected Versions: WooCommerce Display Products by Tags versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a...

WordPress plugin PlayerJS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin EZ InLinkz linkup 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

The vulnerability of the Adobe Experience Manager content and media data management system lies in the insufficient protection of the website structure, which allows an attacker to execute a DOM-Based XSS attack.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute a DOM-Based XSS attack remotely...

CVE-2025-26761

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows DOM-Based XSS.This issue affects Easy Elementor Addons: from n/a through = 2.1.5...

CVE-2025-26558

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mkkmail Aparat Responsive aparat-responsive allows DOM-Based XSS.This issue affects Aparat Responsive: from n/a through = 1.3...

CVE-2025-26567

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in farjana55 Font Awesome WP font-awesome-wp allows DOM-Based XSS.This issue affects Font Awesome WP: from n/a through = 1.0...

CVE-2025-26493

In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab...

CVE-2025-26558

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mkkmail Aparat Responsive aparat-responsive allows DOM-Based XSS.This issue affects Aparat Responsive: from n/a through = 1.3...

CVE-2025-26567

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in farjana55 Font Awesome WP font-awesome-wp allows DOM-Based XSS.This issue affects Font Awesome WP: from n/a through = 1.0...

CVE-2025-26567 WordPress Font Awesome WP plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in farjana55 Font Awesome WP font-awesome-wp allows DOM-Based XSS.This issue affects Font Awesome WP: from n/a through = 1.0...

CVE-2025-26558 WordPress Aparat Responsive plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mkkmail Aparat Responsive allows DOM-Based XSS. This issue affects Aparat Responsive: from n/a through 1.3...

CVE-2025-26558 WordPress Aparat Responsive plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mkkmail Aparat Responsive aparat-responsive allows DOM-Based XSS.This issue affects Aparat Responsive: from n/a through = 1.3...

JetBrains TeamCity < 2024.12.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2024.12.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab CVE-2025-26493 - In JetBrains TeamCity befor...

CVE-2025-26493

In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab...

CVE-2025-26493

In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab...

CVE-2025-26493

In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab...

CVE-2025-26493

In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab...

PT-2025-6219

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2024.12.2 Description The issue concerns a DOM-based cross-site scripting XSS condition in the Code Inspection Report tab. This occurs due to insufficient protection of the web page structure. Exploitation...