2618 matches found
CVE-2025-22745
CVE-2025-22745 is a DOM-based XSS in Navigation Du Lapin Blanc (Navigation Du Lapin Blanc: n/a–1.1.1). Root cause: improper neutralization of input during web page generation. Affected products: Navigation Du Lapin Blanc; versions up to 1.1.1. Impact, as stated: cross-site scripting with potentia...
CVE-2025-22758 WordPress Elementor AI Addons plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Harnani Elementor AI Addons ai-addons-for-elementor allows DOM-Based XSS.This issue affects Elementor AI Addons: from n/a through = 2.2.1...
CVE-2025-22758
CVE-2025-22758 is an authenticated DOM-based Cross-Site Scripting vulnerability in Elementor AI Addons (70 Widgets, Premium Templates, Ultimate Elements) caused by improper input neutralization during web page generation. Affected: Elementor AI Addons versions up to 2.2.1. Impact per the provider...
CVE-2025-22781 WordPress Nativery Plugin plugin <= 0.1.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nativery Nativery nativery allows DOM-Based XSS.This issue affects Nativery: from n/a through = 0.1.6...
CVE-2025-22793 WordPress Bold pagos en linea Plugin <= 3.1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bold Bold pagos en linea bold-pagos-en-linea allows DOM-Based XSS.This issue affects Bold pagos en linea: from n/a through = 3.1.4...
CVE-2025-22793
CVE-2025-22793 affects the WordPress plugin Bold pagos en linea (bold-pagos-en-linea). Description confirms a DOM-Based XSS due to improper input neutralization, impacting Bold pagos en linea versions up to and including 3.1.4. Public corpus in connected documents indicates the vulnerability exis...
PT-2025-4663 · WordPress · Wp Viewstl
Name of the Vulnerable Software and Affected Versions: WP ViewSTL versions 1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject malicious scripts into...
PT-2025-4703 · Unknown · Bold Pagos En Linea
Name of the Vulnerable Software and Affected Versions: Bold pagos en linea versions prior to 3.1.0 Description: The issue is related to improper neutralization of input during web page generation, allowing DOM-Based XSS. This enables attackers to inject malicious scripts into the website,...
CVE-2025-22827
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in joomag WP Joomag wp-joomag allows DOM-Based XSS.This issue affects WP Joomag: from n/a through = 2.5.2...
CVE-2025-22821
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vfthemes StorePress storepress allows DOM-Based XSS.This issue affects StorePress: from n/a through = 1.0.12...
CVE-2025-22823
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jtwerdy Genesis Style Shortcodes genesis-style-shortcodes allows DOM-Based XSS.This issue affects Genesis Style Shortcodes: from n/a through = 1.0...
CVE-2025-22806
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modernaweb Studio Black Widgets For Elementor black-widgets allows DOM-Based XSS.This issue affects Black Widgets For Elementor: from n/a through = 1.3.8...
CVE-2025-22809
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in theme funda PDF Catalog Woocommerce pdf-catalog-woocommerce allows DOM-Based XSS.This issue affects PDF Catalog Woocommerce: from n/a through = 2.0...
CVE-2025-22808
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Surbma Surbma | Premium WP surbma-premium-wp allows DOM-Based XSS.This issue affects Surbma | Premium WP: from n/a through = 9.0...
CVE-2025-22806 WordPress Black Widgets For Elementor plugin <= 1.3.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Modernaweb Studio Black Widgets For Elementor allows DOM-Based XSS.This issue affects Black Widgets For Elementor: from n/a through 1.3.8...
CVE-2025-22806
CVE-2025-22806 affects Black Widgets For Elementor. Root cause: DOM-Based XSS due to improper input neutralization during web page generation; affected versions n/a–1.3.8. Wordfence indicates the issue has been patched.
CVE-2025-22808
CVE-2025-22808: Surbma Premium WP suffers a DOM-based XSS in input handling during web page generation. Affected: Surbma Premium WP (≤9.0); attack requires at least contributor/author privileges. Status: patched; apply update to mitigate.
CVE-2025-22821 WordPress StorePress theme <= 1.0.12 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vfthemes StorePress storepress allows DOM-Based XSS.This issue affects StorePress: from n/a through = 1.0.12...
CVE-2025-22821
CVE-2025-22821 is a DOM-based XSS in StorePress (vfthemes) prior to 1.0.12. The issue arises from Improper Neutralization of Input During Web Page Generation, enabling cross-site scripting. Public reports in Red Hat and Wordfence corroborate a StorePress vulnerability with the StorePress plugin/t...