WordPress Download Manager plugin <= 3.3.57 - Unauthenticated DOM-Based Reflected Cross-Site Scripting vulnerability

Unauthenticated DOM-Based Reflected Cross-Site Scripting vulnerability discovered by Yuvraj Tomar in WordPress Plugin Download Manager versions = 3.3.57...

CVE-2026-18328: Improper Neutralization of Input During Web Page Generation

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via the 'errordescription' parameter in all versions up to, and including, 1.57.0 due to insufficient input sanitization and output escaping. This...

CVE-2024-41591: Improper Neutralization of Input During Web Page Generation

DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS...

CVE-2023-51064: Improper Neutralization of Input During Web Page Generation

QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerability within the component qnme-ajax?method=treetable...

CVE-2023-51063: Improper Neutralization of Input During Web Page Generation

QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting XSS vulnerability within the component qnme-ajax?method=treelevel...

CVE-2022-29455

DOM-based Reflected Cross-Site Scripting XSS vulnerability in Elementor's Elementor Website Builder plugin = 3.5.5 versions...