PT-2025-38950

Name of the Vulnerable Software and Affected Versions eZee Technosys eZee Online Hotel Booking Engine versions through 1.0.0 Description The eZee Online Hotel Booking Engine contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS...

PT-2025-38892

Name of the Vulnerable Software and Affected Versions Podlove Subscribe button versions through 1.3.11 Description The Podlove Subscribe button software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for...

PT-2025-38874

Name of the Vulnerable Software and Affected Versions averta Master Slider versions through 3.11.0 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious code can be inject...

PT-2025-38877

Name of the Vulnerable Software and Affected Versions Designil PDPA Thailand versions through 2.0 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting XSS. This specific instance allows for...

PT-2025-39025

Name of the Vulnerable Software and Affected Versions IP Based Login versions through 2.4.3 Description An issue exists in IP Based Login that allows for Stored Cross-site Scripting XSS. The flaw is due to improper neutralization of input during web page generation. This can allow an attacker to...

PT-2025-38960

Name of the Vulnerable Software and Affected Versions morganrichards Auction Feed versions through 1.1.3 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can ...

PT-2025-38980

Name of the Vulnerable Software and Affected Versions WebWizards MarketKing versions through 2.0.92 Description A flaw exists in WebWizards MarketKing that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. Successful...

WordPress plugin Behance Portfolio Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

WordPress plugin E-namad & Shamed Logo Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38800

Name of the Vulnerable Software and Affected Versions Glen Scott Plugin Security Scanner versions through 2.0.2 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scrip...

PT-2025-39059

Name of the Vulnerable Software and Affected Versions PenciDesign Soledad versions through 8.6.8 Description A flaw exists in PenciDesign Soledad that allows for DOM-Based Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The vulnerability...

PT-2025-39037

Name of the Vulnerable Software and Affected Versions Coderz Studio Custom iFrame for Elementor versions through 1.0.13 Description An issue exists in Coderz Studio Custom iFrame for Elementor that allows for DOM-Based Cross-site Scripting XSS. The issue is due to improper neutralization of input...

PT-2025-38802

Name of the Vulnerable Software and Affected Versions icopydoc Maps for WP versions through 1.2.5 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting XSS. This allows an attacker to inject...

WordPress plugin Safety Exit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the capability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-39016

Name of the Vulnerable Software and Affected Versions epeken Epeken All Kurir versions through 2.0.2 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This can potentially allow an attacke...

PT-2025-38903

Name of the Vulnerable Software and Affected Versions ONTRAPORT PilotPress versions through 2.0.35 Description A flaw exists in ONTRAPORT PilotPress that allows for Stored Cross-site Scripting XSS. This issue arises from improper handling of input during the creation of web pages. Successful...

WordPress plugin Ays Pro Poll Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

PT-2025-38889

Name of the Vulnerable Software and Affected Versions VoucherPress versions through 1.5.7 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can be injected int...

WordPress plugin Custom iFrame for Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-39056

Name of the Vulnerable Software and Affected Versions PenciDesign Penci Portfolio versions through 3.5 Description The software contains a flaw related to improper input handling during web page creation, leading to a DOM-Based Cross-site Scripting XSS condition. This allows for potential malicio...