Lucene search
+L

6982 matches found

Vulnrichment
Vulnrichment
•added 2025/12/22 9:47 a.m.•7 views

CVE-2025-62094 WordPress Void Elementor WHMCS Elements For Elementor Page Builder plugin <= 2.0.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Voidthemes Void Elementor WHMCS Elements For Elementor Page Builder.This issue affects Void Elementor WHMCS Elements For Elementor Page Builder: from n/a through 2.0.1.2...

6.5CVSS5.8AI score0.00159EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/22 12:00 a.m.•19 views

PT-2025-52638

Name of the Vulnerable Software and Affected Versions Voidthemes Void Elementor WHMCS Elements For Elementor Page Builder versions through 2.0.1.2 Description The software contains a flaw related to improper input handling during web page creation, which could allow for Cross-site Scripting XSS...

6.5CVSS6.1AI score0.00159EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/12/22 12:00 a.m.•16 views

WordPress plugin Void Elementor WHMCS Elements For Elementor Page Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

6.5CVSS5.7AI score0.00159EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/22 12:00 a.m.•5 views

CVE-2025-62094: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in voidthemes Void Elementor WHMCS Elements For Elementor Page Builder void-elementor-whmcs-elements.This issue affects Void Elementor WHMCS Elements For Elementor Page Builder: from n/a through =...

6.5CVSS5.8AI score0.00159EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/18 12:00 a.m.•14 views

WordPress Addon Elements for Elementor Cross-Site Scripting Vulnerability

WordPress Addon Elements for Elementor is a plugin for the Elementor page builder designed to extend its functionality by providing additional widgets, templates and tools. WordPress Addon Elements for Elementor suffers from a cross-site scripting vulnerability that stems from the program's...

6.4CVSS6.2AI score0.00233EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/12/18 12:00 a.m.•7 views

EulerOS Virtualization 2.13.1 : polkit (EulerOS-SA-2025-2558)

According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be...

6.7CVSS7.1AI score0.00205EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/12/17 3:36 p.m.•19 views

WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin WPBakery Visual Composer WHMCS Elements versions = 1.0.4.3...

6.1CVSS6.1AI score0.0021EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/17 12:00 a.m.•20 views

The vulnerability of the Stratix IOS operating system for Stratix 5410, 5700, and 8000 models arises from incorrect neutralization of special elements in the output data. This allows attackers to execute arbitrary code.

The vulnerability of the Stratix IOS operating system for Stratix 5410, 5700, and 8000 models is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.1AI score0.00627EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/12/17 12:00 a.m.•15 views

Adobe Photoshop Elements Installed (macOS)

Binary data adobephotoshopelementsmacosinstalled.nbin...

7AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/12/17 12:00 a.m.•18 views

The vulnerability of NetBak Replicator’s backup software lies in the absence of quotation marks around elements or search paths in the code. This allows an attacker to gain access to the user account.

The vulnerability of NetBak Replicator’s backup software lies in the absence of quotation marks in the code for elements or search paths. Exploiting this vulnerability could allow an attacker to gain access to the user account...

7.8CVSS6.1AI score0.00206EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2025/12/16 12:16 a.m.•17 views

CVE-2025-14731

A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CTParser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a...

7.2CVSS0.00449EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•13 views

PT-2025-54577

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in the JavaScript engine V8 within the Google Chrome browser, relating to incorrect security checks for standard elements. Successful exploitation could allow a remote...

9.4CVSS7.5AI score0.08622EPSS
SaveExploits0References51
Redos
Redos
•added 2025/12/16 12:00 a.m.•21 views

ROS-20251216-7367

A vulnerability in the Autofill component of Google Chrome and Microsoft Edge browsers is related to errors in the implementation of security checks for standard elements. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive information...

5.3CVSS6.1AI score0.00204EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/12/16 12:00 a.m.•15 views

WordPress plugin LBG Zoominoutslider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.5CVSS7.6AI score0.00251EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/12/16 12:00 a.m.•19 views

The vulnerability of the plugin for working with Git repositories in Jenkins’ Git client plugin, related to the failure to take measures to neutralize special elements, allows a violator to execute arbitrary code.

The vulnerability of the plugin for working with Git repositories in Jenkins Git clients is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

5CVSS6AI score0.00213EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/16 12:00 a.m.•18 views

The vulnerability of the Nagios Network Analyzer software lies in its inability to neutralize certain special elements, allowing a hacker to execute arbitrary code. This vulnerability allows attackers to perform unauthorized actions.

The vulnerability of the Nagios Network Analyzer software lies in its lack of measures to neutralize certain special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.1AI score0.01428EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/16 12:00 a.m.•17 views

The vulnerability of Zyxel network devices’ microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system commands. This vulnerability allows attackers to execute arbitrary operating system commands.

The vulnerability of Zyxel network devices’ microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system commands during...

9CVSS6.1AI score0.01073EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/15 11:32 p.m.•56 views

CVE-2025-14731 CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engine

A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CTParser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a...

6.5CVSS0.00449EPSS
SaveExploits1References6
CVE
CVE
•added 2025/12/15 11:32 p.m.•42 views

CVE-2025-14731

CVE-2025-14731 affects CTCMS Content Management System up to version 2.1.2. The issue resides in the Frontend/Template Management Module, specifically the library file /ctcms/apps/libraries/CT_Parser.php, where improper neutralization of special elements used in the template engine is reported. T...

7.2CVSS6.1AI score0.00449EPSS
SaveExploits1References6Affected Software1
Patchstack
Patchstack
•added 2025/12/15 6:35 p.m.•20 views

WordPress Addon Elements for Elementor plugin <= 1.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Elementor Addon Elements versions = 1.14.3...

6.4CVSS5.5AI score0.00233EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder