CVE-2025-49940

CVE-2025-49940 is a DOM-based XSS in WordPress Fusion Builder (fusion-builder) up to version 3.13.2. The root cause is improper input neutralization during web page generation, enabling script execution in the browser context. Affected software: Fusion Builder fusion-builder (WordPress plugin)

CVE-2025-49923 WordPress Seriously Simple Podcasting plugin <= 3.11.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through = 3.11.1...

CVE-2025-49552 Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by a high-privileged attacker to execute malicious scripts in a victim's browser. Exploitation of this issue requires user interaction in that a victim must navigate ...

EUVD-2017-16760

Malware in sbrugna...

EUVD-2017-7772

Malware in sbrugna...

EUVD-2016-0943

Malware in sbrugna...

EUVD-2021-21478

Malware in sbrugna...

EUVD-2025-25921

Malicious code in bioql PyPI...

EUVD-2025-28187

Malicious code in bioql PyPI...

EUVD-2023-34871

Malicious code in bioql PyPI...

EUVD-2025-25279

Malicious code in bioql PyPI...

EUVD-2025-25040

Malicious code in bioql PyPI...

EUVD-2025-31262

Malicious code in bioql PyPI...

EUVD-2025-28357

Malicious code in bioql PyPI...

EUVD-2025-26943

Malicious code in bioql PyPI...

EUVD-2025-26955

Malicious code in bioql PyPI...

ROS-20251001-03

A vulnerability in the jQuery library exists due to insufficient cleansing of user-supplied data when passing elements to jQuery DOM methods. Exploitation of the vulnerability could allow an attacker, acting remotely, to perform cross-site scripting attacks...

CVE-2025-60142

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DaganLev Simple Meta Tags simple-meta-tags allows DOM-Based XSS.This issue affects Simple Meta Tags: from n/a through = 1.5...

CVE-2025-60142

CVE-2025-60142 – WordPress: Simple Meta Tags plugin (versions up to 1.5) exposes a DOM-based XSS due to improper neutralization of input during web page generation. The vulnerability is classified as an authenticated issue (Contributor+ required) with stored XSS. The linked docs indicate the vuln...

PT-2025-39605

Name of the Vulnerable Software and Affected Versions Robin W bbp topic count versions through 3.1 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for potential malicious code...