CVE-2025-8362 GoogleTag Manager - Moderately critical - Cross-site scripting - SA-CONTRIB-2025-094

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal GoogleTag Manager allows Cross-Site Scripting XSS.This issue affects GoogleTag Manager: from 0.0.0 before 1.10.0...

CVE-2025-8092

CVE-2025-8092 FFECT: Drupal COOKiES Consent Management before 1.2.16 is vulnerable to a Cross-site Scripting (XSS) flaw in the COOKiES video submodule due to improper input neutralization during web page generation. Affected versions: 0.0.0 up to

CVE-2025-49898 WordPress Dropshix plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xolluteon Dropshix allows DOM-Based XSS.This issue affects Dropshix: from n/a through 4.0.14...

PT-2025-33491 · Unknown · Gopiplus Vertical Scroll Slideshow Gallery

Name of the Vulnerable Software and Affected Versions: gopiplus Vertical scroll slideshow gallery versions n/a through 9.1 Description: Improper neutralization of special elements used in an SQL command 'SQL Injection' allows for Blind SQL Injection. Recommendations: At the moment, there is no...

CVE-2025-55711

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Table Builder WP Table Builder wp-table-builder allows Stored XSS.This issue affects WP Table Builder: from n/a through = 2.0.12...

CVE-2025-54747

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpbakery Templatera templatera allows DOM-Based XSS.This issue affects Templatera: from n/a through = 2.3.0...

CVE-2025-49745

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-24296

Improper input validation in some firmware for the IntelR E810 Ethernet before version 4.6 may allow a privileged user to enable denial of service via local access...

CVE-2025-49554

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input,...

CVE-2025-52771 WordPress Video Expander Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bcupham Video Expander video-expander allows Stored XSS.This issue affects Video Expander: from n/a through = 1.0...

CVE-2025-52771

CVE-2025-52771 affects the WordPress plugin Video Expander (versions up to 1.0). The issue is a Stored Cross-Site Scripting (XSS) vulnerability arising from improper input neutralization during web page generation. Impact is outlined as cross-site scripting with potential data exposure or session...

CVE-2025-53330 WordPress WP Rentals theme <= 3.16.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WpEstate WP Rentals wprentals allows Stored XSS.This issue affects WP Rentals: from n/a through = 3.16.1...

CVE-2025-53330 WordPress WP Rentals theme <= 3.16.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WpEstate WP Rentals wprentals allows Stored XSS.This issue affects WP Rentals: from n/a through = 3.16.1...

CVE-2025-53330

CVE-2025-53330 : WP Rentals WordPress theme (up to 3.13.1) has stored XSS due to improper input neutralization during web page generation. This can enable cross-site scripting within affected sites using the WP Rentals theme. Remediation: upgrade to a fixed version (Patchstack lists 3.16.1 as the...

CVE-2025-53342

CVE-2025-53342 is a stored XSS vulnerability in GoodLayers Modernize theme (affected: versions up to and including 3.4.0). The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Public sources in the connected documents corroborate...

CVE-2025-53342 WordPress Modernize Theme <= 3.4.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Modernize modernize allows Stored XSS.This issue affects Modernize: from n/a through = 3.4.0...

CVE-2025-53582 WordPress WordLift Plugin <= 3.54.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WordLift WordLift wordlift allows Stored XSS.This issue affects WordLift: from n/a through = 3.54.5...

CVE-2025-53582 WordPress WordLift Plugin <= 3.54.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WordLift WordLift wordlift allows Stored XSS.This issue affects WordLift: from n/a through = 3.54.5...

CVE-2025-54054

CVE-2025-54054 : WordPress plugin “12 Step Meeting List” is affected by a Stored XSS due to improper input neutralization during web page generation. Affected versions are 12 Step Meeting List up to 3.18.3. Connected sources confirm this as a real vulnerability entry and indicate a patch exists; ...

CVE-2025-54708 WordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks b-blocks allows DOM-Based XSS.This issue affects B Blocks: from n/a through = 2.0.5...