PT-2025-14893

Name of the Vulnerable Software and Affected Versions Aviplugins Videos versions 1.0.0 through 1.0.5 Description The issue is related to improper neutralization of script-related HTML tags in a web page, which allows for reflected XSS attacks. Recommendations For versions 1.0.0 through 1.0.5,...

PT-2025-14980

Name of the Vulnerable Software and Affected Versions Nikita Advanced WordPress Backgrounds versions 1.12.4 and earlier Description The issue is related to improper neutralization of script-related HTML tags in a web page, which allows for code injection. This is a basic XSS vulnerability...

CVE-2025-30676

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.19. Users are recommended to upgrade to version 18.12.19, which fixes the issue...

CVE-2025-31604

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Cal.com Cal.com cal-com allows Stored XSS.This issue affects Cal.com: from n/a through = 1.0.0...

CVE-2025-31575

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Vasilis Triantafyllou Flag Icons language-icons-flags-switcher allows Stored XSS.This issue affects Flag Icons: from n/a through = 2.2...

CVE-2025-30676

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.19. Users are recommended to upgrade to version 18.12.19, which fixes the issue...

CVE-2025-30676

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.19. Users are recommended to upgrade to version 18.12.19, which fixes the issue...

CVE-2025-30676: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.19. Users are recommended to upgrade to version 18.12.19, which fixes the issue...

CVE-2025-31575

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Vasilis Triantafyllou Flag Icons language-icons-flags-switcher allows Stored XSS.This issue affects Flag Icons: from n/a through = 2.2...

CVE-2025-31575

Technical details for CVE-2025-31575 are not disclosed in the provided documents; the corpus does not specify affected products, versions, root cause, impact, or fix beyond the high-level description.

PT-2025-13728

Name of the Vulnerable Software and Affected Versions Vasilis Triantafyllou Flag Icons versions n/a through 2.2 Description The issue is related to improper neutralization of script-related HTML tags in a web page, which allows for Stored XSS. This is a basic XSS vulnerability. Recommendations Fo...

CVE-2025-22501

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Improve My City Improve My City improve-my-city allows Reflected XSS.This issue affects Improve My City: from n/a through = 1.6...

CVE-2025-31465

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cornershop Better Section Navigation Widget better-section-navigation allows Stored XSS.This issue affects Better Section Navigation Widget: from n/a through = 1.6.1...

CVE-2025-31075: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in videowhisper MicroPayments paid-membership allows Stored XSS.This issue affects MicroPayments: from n/a through = 2.9.29...

PT-2025-13501

Name of the Vulnerable Software and Affected Versions cornershop Better Section Navigation Widget versions 1.6.1 and earlier Description The issue is related to improper neutralization of script-related HTML tags in a web page, which allows for Stored XSS attacks. This can be exploited to inject...

PT-2025-13023

Summary User supplied values passed through to certain attributes in form widgets are not fully escaped for potentially dangerous tokens, and in some cases are rendered in browser as valid html tags. Details Attributes passed to the widget such as label field containing , and similar tokens are n...

PT-2025-12820

Name of the Vulnerable Software and Affected Versions Improve My City versions 1.6 and earlier Description The issue is related to improper neutralization of script-related HTML tags in a web page, allowing for Reflected XSS attacks. This enables potential attackers to inject malicious scripts in...

SimpleOne Platform HTML Injection

The vulnerability of SimpleOne Platform’s software lies in the lack of measures taken to eliminate scipt-related HTML tags on web pages. Exploiting this vulnerability allows a remote attacker to inject an HTML tag that includes a link to an external resource...

CVE-2024-11824: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in langgenius/dify version latest, specifically in the chat log functionality. The vulnerability arises because certain HTML tags like and are not disallowed, allowing an attacker to inject malicious HTML into the log via prompts. When an adm...

CVE-2024-9107: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecting version git 20b2e02. The vulnerability arises from improper sanitization of HTML tags in chat history uploads. Specifically, the sanitization logic fails to handle HTML tags within code...