Lucene search
+L

4545 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•6 views

CVE-2025-60162: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Job Board Manager job-board-manager allows DOM-Based XSS.This issue affects Job Board Manager: from n/a through = 2.1.61...

6.5CVSS5.8AI score0.00217EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/09/24 6:31 p.m.•15 views

CVE-2025-58233

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Guaven Labs SQL Chart Builder sql-chart-builder allows DOM-Based XSS.This issue affects SQL Chart Builder: from n/a through = 2.3.7.2...

6.5CVSS5.9AI score0.00215EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/24 6:31 p.m.•17 views

CVE-2025-58220

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Techeshta Card Elements for WPBakery card-elements-for-wpbakery allows DOM-Based XSS.This issue affects Card Elements for WPBakery: from n/a through = 1.0.9...

6.5CVSS5.7AI score0.00209EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/24 6:31 p.m.•14 views

CVE-2025-58651

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PlayerJS PlayerJS playerjs allows DOM-Based XSS.This issue affects PlayerJS: from n/a through = 2.24...

6.5CVSS5.8AI score0.00215EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/24 6:31 p.m.•19 views

CVE-2025-59585

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Penci Recipe penci-recipe allows DOM-Based XSS.This issue affects Penci Recipe: from n/a through = 4.0...

6.5CVSS5.8AI score0.00174EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/24 6:31 p.m.•21 views

CVE-2025-59553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Coderz Studio Custom iFrame for Elementor custom-iframe allows DOM-Based XSS.This issue affects Custom iFrame for Elementor: from n/a through = 1.0.13...

6.5CVSS5.9AI score0.00209EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/24 6:30 p.m.•15 views

CVE-2025-57938

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through = 1.9.2...

6.5CVSS5.7AI score0.00223EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/22 7:16 p.m.•19 views

CVE-2025-59586

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Penci Portfolio penci-portfolio allows DOM-Based XSS.This issue affects Penci Portfolio: from n/a through = 3.5...

6.5CVSS0.00174EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/22 7:16 p.m.•31 views

CVE-2025-59553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Coderz Studio Custom iFrame for Elementor custom-iframe allows DOM-Based XSS.This issue affects Custom iFrame for Elementor: from n/a through = 1.0.13...

6.5CVSS0.00209EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/22 7:16 p.m.•14 views

CVE-2025-58233

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Guaven Labs SQL Chart Builder sql-chart-builder allows DOM-Based XSS.This issue affects SQL Chart Builder: from n/a through = 2.3.7.2...

6.5CVSS0.00215EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/22 7:16 p.m.•11 views

CVE-2025-57999

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows DOM-Based XSS.This issue affects WPKoi Templates for Elementor: from n/a through = 3.4.3...

6.5CVSS0.00215EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/22 7:15 p.m.•13 views

CVE-2025-57953

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 100plugins Open User Map open-user-map allows DOM-Based XSS.This issue affects Open User Map: from n/a through = 1.4.14...

6.5CVSS0.00313EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/22 7:15 p.m.•17 views

CVE-2025-57954

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Poll Maker poll-maker allows DOM-Based XSS.This issue affects Poll Maker: from n/a through = 6.0.2...

6.5CVSS0.00313EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/22 6:25 p.m.•52 views

CVE-2025-59583

CVE-2025-59583 affects the Penci Filter Everything WordPress plugin (PenciFilter Everything, penci-filter-everything) with a DOM-based XSS flaw caused by improper input neutralization during web page generation in versions

6.5CVSS5.8AI score0.00174EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/22 6:25 p.m.•33 views

CVE-2025-59583 WordPress Penci Filter Everything Plugin < 1.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Penci Filter Everything penci-filter-everything allows DOM-Based XSS.This issue affects Penci Filter Everything: from n/a through 1.7...

6.5CVSS0.00174EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/22 6:25 p.m.•39 views

CVE-2025-59585

CVE-2025-59585 affects the WordPress plugin Penci Recipe. The connected document confirms a DOM-based XSS due to improper input neutralization during web page generation, affecting Penci Recipe versions from n/a through 4.0. The CVSS metrics indicate a network-accessible, low-privilege, low-impac...

6.5CVSS5.8AI score0.00174EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/22 6:25 p.m.•14 views

CVE-2025-59589 WordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Soledad soledad allows DOM-Based XSS.This issue affects Soledad: from n/a through = 8.6.8...

6.5CVSS5.8AI score0.00174EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/22 6:25 p.m.•7 views

CVE-2025-53463 WordPress HT Mega – Absolute Addons for WPBakery Page Builder Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Mega – Absolute Addons for WPBakery Page Builder ht-mega-for-wpbakery allows DOM-Based XSS.This issue affects HT Mega – Absolute Addons for WPBakery Page Builder: from n/a through =...

6.5CVSS5.8AI score0.00274EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/22 6:25 p.m.•23 views

CVE-2025-53463 WordPress HT Mega – Absolute Addons for WPBakery Page Builder Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Mega – Absolute Addons for WPBakery Page Builder ht-mega-for-wpbakery allows DOM-Based XSS.This issue affects HT Mega – Absolute Addons for WPBakery Page Builder: from n/a through =...

6.5CVSS0.00274EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/22 6:25 p.m.•23 views

CVE-2025-57911

CVE-2025-57911 is tied to the WordPress Adverts Plugin – Adverts Click Tracker. The connected data indicate an authenticated, stored cross‑site scripting (XSS) vulnerability in Adverts

6.5CVSS5.8AI score0.00274EPSS
SaveExploits0References1
Rows per page
Query Builder