6982 matches found
CVE-2025-62094 WordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0.1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Voidthemes Void Elementor WHMCS Elements For Elementor Page Builder.This issue affects Void Elementor WHMCS Elements For Elementor Page Builder: from n/a through 2.0.1.2...
PT-2025-52638
Name of the Vulnerable Software and Affected Versions Voidthemes Void Elementor WHMCS Elements For Elementor Page Builder versions through 2.0.1.2 Description The software contains a flaw related to improper input handling during web page creation, which could allow for Cross-site Scripting XSS...
WordPress plugin Void Elementor WHMCS Elements For Elementor Page Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...
CVE-2025-62094: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidthemes Void Elementor WHMCS Elements For Elementor Page Builder void-elementor-whmcs-elements.This issue affects Void Elementor WHMCS Elements For Elementor Page Builder: from n/a through =...
WordPress Addon Elements for Elementor Cross-Site Scripting Vulnerability
WordPress Addon Elements for Elementor is a plugin for the Elementor page builder designed to extend its functionality by providing additional widgets, templates and tools. WordPress Addon Elements for Elementor suffers from a cross-site scripting vulnerability that stems from the program's...
EulerOS Virtualization 2.13.1 : polkit (EulerOS-SA-2025-2558)
According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be...
WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin WPBakery Visual Composer WHMCS Elements versions = 1.0.4.3...
The vulnerability of the Stratix IOS operating system for Stratix 5410, 5700, and 8000 models arises from incorrect neutralization of special elements in the output data. This allows attackers to execute arbitrary code.
The vulnerability of the Stratix IOS operating system for Stratix 5410, 5700, and 8000 models is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Adobe Photoshop Elements Installed (macOS)
Binary data adobephotoshopelementsmacosinstalled.nbin...
The vulnerability of NetBak Replicator’s backup software lies in the absence of quotation marks around elements or search paths in the code. This allows an attacker to gain access to the user account.
The vulnerability of NetBak Replicator’s backup software lies in the absence of quotation marks in the code for elements or search paths. Exploiting this vulnerability could allow an attacker to gain access to the user account...
CVE-2025-14731
A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CTParser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a...
PT-2025-54577
Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in the JavaScript engine V8 within the Google Chrome browser, relating to incorrect security checks for standard elements. Successful exploitation could allow a remote...
ROS-20251216-7367
A vulnerability in the Autofill component of Google Chrome and Microsoft Edge browsers is related to errors in the implementation of security checks for standard elements. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive information...
WordPress plugin LBG Zoominoutslider 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
The vulnerability of the plugin for working with Git repositories in Jenkins’ Git client plugin, related to the failure to take measures to neutralize special elements, allows a violator to execute arbitrary code.
The vulnerability of the plugin for working with Git repositories in Jenkins Git clients is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...
The vulnerability of the Nagios Network Analyzer software lies in its inability to neutralize certain special elements, allowing a hacker to execute arbitrary code. This vulnerability allows attackers to perform unauthorized actions.
The vulnerability of the Nagios Network Analyzer software lies in its lack of measures to neutralize certain special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Zyxel network devices’ microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system commands. This vulnerability allows attackers to execute arbitrary operating system commands.
The vulnerability of Zyxel network devices’ microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system commands during...
CVE-2025-14731 CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engine
A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CTParser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a...
CVE-2025-14731
CVE-2025-14731 affects CTCMS Content Management System up to version 2.1.2. The issue resides in the Frontend/Template Management Module, specifically the library file /ctcms/apps/libraries/CT_Parser.php, where improper neutralization of special elements used in the template engine is reported. T...
WordPress Addon Elements for Elementor plugin <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Elementor Addon Elements versions = 1.14.3...