Lucene search
K

4382 matches found

NVD
NVD
added 2025/03/27 11:15 a.m.15 views

CVE-2025-30893

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LeadConnector LeadConnector leadconnector allows DOM-Based XSS.This issue affects LeadConnector: from n/a through = 3.0.2...

6.5CVSS0.00252EPSS
Exploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.3 views

CVE-2025-30860

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows DOM-Based XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.2...

6.5CVSS0.00308EPSS
Exploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.11 views

CVE-2025-30832

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themifyme Themify Event Post themify-event-post allows DOM-Based XSS.This issue affects Themify Event Post: from n/a through = 1.3.2...

6.5CVSS0.00308EPSS
Exploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.5 views

CVE-2025-30818

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mlaza jAlbum Bridge jalbum-bridge allows DOM-Based XSS.This issue affects jAlbum Bridge: from n/a through = 2.0.17...

6.5CVSS0.00308EPSS
Exploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.3 views

CVE-2025-30826

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pierre Lannoy IP Locator ip-locator allows DOM-Based XSS.This issue affects IP Locator: from n/a through = 4.1.0...

6.5CVSS0.00308EPSS
Exploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.5 views

CVE-2025-30786

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in oooorgle Quotes llama quotes-llama allows DOM-Based XSS.This issue affects Quotes llama: from n/a through = 3.1.0...

6.5CVSS0.00291EPSS
Exploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.8 views

CVE-2025-30770

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Syed Balkhi Charitable charitable allows DOM-Based XSS.This issue affects Charitable: from n/a through = 1.8.4.7...

6.5CVSS0.003EPSS
Exploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.5 views

CVE-2025-30771

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alain-Aymerick FRANCOIS WP Cassify wp-cassify allows DOM-Based XSS.This issue affects WP Cassify: from n/a through = 2.3.5...

6.5CVSS0.00308EPSS
Exploits0References1
NVD
NVD
added 2025/03/27 11:15 a.m.6 views

CVE-2025-30766

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows DOM-Based XSS.This issue affects Happy Addons for Elementor: from n/a through = 3.16.2...

6.5CVSS0.00308EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/27 10:55 a.m.5 views

CVE-2025-30907 WordPress SecuPress Free plugin <= 2.2.5.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SecuPress SecuPress Free secupress allows DOM-Based XSS.This issue affects SecuPress Free: from n/a through = 2.2.5.3...

6.5CVSS7.3AI score0.0026EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/27 10:55 a.m.24 views

CVE-2025-30907 WordPress SecuPress Free plugin <= 2.2.5.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SecuPress SecuPress Free secupress allows DOM-Based XSS.This issue affects SecuPress Free: from n/a through = 2.2.5.3...

6.5CVSS0.0026EPSS
Exploits0References1
CVE
CVE
added 2025/03/27 10:55 a.m.59 views

CVE-2025-30907

CVE-2025-30907 (SecuPress Free) is a DOM-based XSS vector in SecuPress Free for WordPress. Public details from connected sources confirm: vulnerable component is SecuPress Free (≤ 2.2.5.3) and the issue is an improper neutralization of input during web page generation leading to Cross‑Site Script...

6.5CVSS7.2AI score0.0026EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/03/27 10:55 a.m.20 views

CVE-2025-30903 WordPress SyntaxHighlighter Evolved plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Mills SyntaxHighlighter Evolved syntaxhighlighter allows DOM-Based XSS.This issue affects SyntaxHighlighter Evolved: from n/a through = 3.7.1...

6.5CVSS0.00252EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/27 10:55 a.m.5 views

CVE-2025-30903 WordPress SyntaxHighlighter Evolved plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Mills SyntaxHighlighter Evolved syntaxhighlighter allows DOM-Based XSS.This issue affects SyntaxHighlighter Evolved: from n/a through = 3.7.1...

6.5CVSS7.3AI score0.00252EPSS
Exploits0References1
CVE
CVE
added 2025/03/27 10:55 a.m.57 views

CVE-2025-30903

The connected vulnerability entry for CVE-2025-30903 maps to SyntaxHighlighter Evolved (WordPress) and shows a concrete flaw: version

6.5CVSS7.2AI score0.00252EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/27 10:55 a.m.9 views

CVE-2025-30893 WordPress LeadConnector plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in varunvairavanlc LeadConnector leadconnector allows DOM-Based XSS.This issue affects LeadConnector: from n/a through = 3.0.2...

6.5CVSS7.3AI score0.00252EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/27 10:55 a.m.22 views

CVE-2025-30893 WordPress LeadConnector plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LeadConnector LeadConnector leadconnector allows DOM-Based XSS.This issue affects LeadConnector: from n/a through = 3.0.2...

6.5CVSS0.00252EPSS
Exploits0References1
CVE
CVE
added 2025/03/27 10:55 a.m.57 views

CVE-2025-30893

CVE-2025-30893 affects LeadConnector plugin for WordPress (LeadConnector

6.5CVSS8.6AI score0.00252EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/27 10:55 a.m.3 views

CVE-2025-30860 WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows DOM-Based XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.2...

6.5CVSS7.3AI score0.00308EPSS
Exploits0References1
CVE
CVE
added 2025/03/27 10:55 a.m.51 views

CVE-2025-30860

CVE-2025-30860 is a DOM-based Cross-Site Scripting vulnerability in Off-Canvas Sidebars & Menus (Slidebars) for WordPress, stemming from improper neutralization of input during web page generation. Affected versions range up to 0.5.8.2 (date shown). Exploitation would require user interaction and...

6.5CVSS7.2AI score0.00308EPSS
Exploits0References1
Rows per page
Query Builder