PT-2025-4876

Name of the Vulnerable Software and Affected Versions AlTi5 AlT Report versions 1.12.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This enables attackers to inject malicious scrip...

PT-2025-5217

Name of the Vulnerable Software and Affected Versions Saiem Khan Image Switcher versions 1.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means an attacker can inject malicious scrip...

CVE-2025-23830: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jobair JB Horizontal Scroller News Ticker jb-horizontal-scroller-news-ticker allows DOM-Based XSS.This issue affects JB Horizontal Scroller News Ticker: from n/a through = 1.0...

CVE-2025-23941: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in meinturnierplan MeinTurnierplan.de Widget Viewer meinturnierplande-widget-viewer allows Stored XSS.This issue affects MeinTurnierplan.de Widget Viewer: from n/a through = 1.1...

CVE-2025-23940: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in horiyuki Image Switcher image-switcher allows Stored XSS.This issue affects Image Switcher: from n/a through = 0.1.1...

PT-2025-4882

Name of the Vulnerable Software and Affected Versions Nasir Scroll Top Advanced versions n/a through 2.5 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the...

PT-2025-5150

Name of the Vulnerable Software and Affected Versions WCS QR Code Generator versions n/a through 1.0 Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

PT-2025-5215

Name of the Vulnerable Software and Affected Versions CC Circle Progress Bar versions 1.0.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means an attacker can inject malicious script...

PT-2025-5102

Name of the Vulnerable Software and Affected Versions WP-Revive Adserver versions prior to 2.2.1 Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This enables attackers to inject malicious scripts in...

PT-2025-5159

Name of the Vulnerable Software and Affected Versions Anshi Solutions Category D3 Tree versions n/a through 1.1 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. Recommendations For...

CVE-2025-23434: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in viher3 Easy EU Cookie law easy-eu-cookie-law allows Stored XSS.This issue affects Easy EU Cookie law: from n/a through = 1.3.3.1...

CVE-2025-22769: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Brahma Multifox allows Stored XSS.This issue affects Multifox: from n/a through 1.3.7...

CVE-2025-22750: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Patel Post Carousel & Slider post-types-carousel-slider allows Reflected XSS.This issue affects Post Carousel & Slider: from n/a through = 1.0.4...

PT-2025-4444

Name of the Vulnerable Software and Affected Versions AGILELOGIX Free Google Maps versions 1.0.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

CVE-2025-22765: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weiluri WP Order By wp-order-by allows Reflected XSS.This issue affects WP Order By: from n/a through = 1.4.2...

CVE-2025-22788: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codexpert, Inc CoDesigner woolementor allows Stored XSS.This issue affects CoDesigner: from n/a through = 4.29...

PT-2025-4665

Name of the Vulnerable Software and Affected Versions S-DEV SEO versions 1.88 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS attacks. Recommendations For S-DEV SEO versio...

CVE-2025-22755: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bavington WP Headmaster wp-headmaster allows Reflected XSS.This issue affects WP Headmaster: from n/a through = 0.3...

PT-2025-4432

Name of the Vulnerable Software and Affected Versions Photo Gallery – Image Gallery by Ape versions prior to 2.2.8 Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject...

PT-2025-4686

Name of the Vulnerable Software and Affected Versions Zarinpal Paid Download versions n/a through 2.3 Description The issue affects Masoud Amini Zarinpal Paid Download, allowing Reflected XSS due to improper neutralization of input during web page generation. This enables attackers to inject...