PT-2025-14838 · Unknown · React-Draft-Wysiwyg

Name of the Vulnerable Software and Affected Versions: react-draft-wysiwyg versions 3.1 and earlier Description: The issue is related to Cross-site Scripting XSS via the Embedded button, which results in saving the payload in the iframe tag. This allows attackers to exploit the vulnerability...

CVE-2025-32251: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through = 1.23...

CVE-2025-31421: Insertion of Sensitive Information into Externally-Accessible File or Directory

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Oblak Studio Srbtranslatin srbtranslatin allows Retrieve Embedded Sensitive Data.This issue affects Srbtranslatin: from n/a through = 3.2.0...

CVE-2025-3191: Improper Neutralization of Input During Web Page Generation

All versions of the package react-draft-wysiwyg are vulnerable to Cross-site Scripting XSS via the Embedded button which will then result in saving the payload in the tag...

CVE-2025-32257: Exposure of Sensitive System Information Due to Uncleared Debug Information

Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability in 1clickmigration 1 Click WordPress Migration 1-click-migration allows Retrieve Embedded Sensitive Data.This issue affects 1 Click WordPress Migration: from n/a through = 2.5.7...

CVE-2025-32255: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ERA404 StaffList stafflist allows Retrieve Embedded Sensitive Data.This issue affects StaffList: from n/a through = 3.2.7...

libreoffice: Macro URL arbitrary script execution

A flaw was found in LibreOffice. In the affected versions of LibreOffice, a link in a browser using that scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments...

CVE-2025-31558: Insertion of Sensitive Information into Externally-Accessible File or Directory

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Greg TailPress tailpress allows Retrieve Embedded Sensitive Data.This issue affects TailPress: from n/a through = 0.4.4...

CVE-2025-31832: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beee ACF City Selector acf-city-selector allows Retrieve Embedded Sensitive Data.This issue affects ACF City Selector: from n/a through = 1.17.0...

CVE-2025-31550: Insertion of Sensitive Information into Externally-Accessible File or Directory

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in thom4 WP-LESS wp-less allows Retrieve Embedded Sensitive Data.This issue affects WP-LESS: from n/a through = 1.9.6...

WordPress plugin ACF City Selector has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-31788: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in Smackcoders Inc., AIO Performance Profiler, Monitor, Optimize, Compress & Debug all-in-one-performance-accelerator allows Retrieve Embedded Sensitive Data.This issue affects AIO Performance Profiler, Monitor, Optimize, Compress &...

CVE-2025-31842: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in viralloops Viral Loops WP Integration viral-loops-wp-integration allows Retrieve Embedded Sensitive Data.This issue affects Viral Loops WP Integration: from n/a through = 3.4.0...

CVE-2025-31001: Debug Messages Revealing Unnecessary Information

Debug Messages Revealing Unnecessary Information vulnerability in TLA Media GTM Kit gtm-kit allows Retrieve Embedded Sensitive Data.This issue affects GTM Kit: from n/a through = 2.4.0...

libreoffice: Macro URL arbitrary script execution

A flaw was found in LibreOffice. In the affected versions of LibreOffice, a link in a browser using that scheme could be constructed with an embedded inner URL that, when passed to LibreOffice, could call internal macros with arbitrary arguments...

org.apache.camel.springboot:camel-infinispan-embedded-starter (>=3.9.0, <=3.10.0), org.infinispan:infinispan-javadoc-all (11.0.10.final) +9 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (11.0.10.final)

org.infinispan:infinispan-query MAVEN version 11.0.10.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.apache.camel.springboot:camel-infinispan-embedded-starter =3.9.0, =3.10.0 -...

com.google.appengine:jetty12-assembly (>=2.0.27, <=2.0.31), org.apache.camel.karaf:camel-infinispan-embedded (4.7.0) +23 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (>=15.0.0.cr1, <=15.0.5.final)

org.infinispan:infinispan-query MAVEN version =15.0.0.cr1, =2.0.27, =4.6.0, =12.0.10, =12.0.9, =12.0.9, =12.0.9, =12.0.12, =15.0.0.cr1, =15.0.0.cr1, =15.0.0.cr1, =15.0.0.cr1, =15.0.0.cr1, =15.0.5.final and more Source cves: CVE-2024-6875 Source advisory: GHSA-2Q39-W2HW-2PJM...

org.infinispan.server:infinispan-server-event-logger (10.0.0.beta4), org.infinispan.server:infinispan-server-infinispan (10.0.0.beta4) +11 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (10.0.0.beta4)

org.infinispan:infinispan-query MAVEN version 10.0.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-event-logger 10.0.0.beta4 -...

org.infinispan.server:infinispan-server-feature-pack (8.1.5.final), org.infinispan.server:infinispan-server-infinispan (8.1.5.final) +6 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (8.1.5.final)

org.infinispan:infinispan-query MAVEN version 8.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.infinispan.server:infinispan-server-feature-pack 8.1.5.final -...

org.apache.camel.springboot:camel-infinispan-embedded-starter (3.8.0), org.infinispan:infinispan-javadoc-all (11.0.8.final) +9 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (11.0.8.final)

org.infinispan:infinispan-query MAVEN version 11.0.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.apache.camel.springboot:camel-infinispan-embedded-starter 3.8.0 -...