PT-2025-12601

Name of the Vulnerable Software and Affected Versions Pretty file links versions n/a through 0.9 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS in Pretty file links. Recommendations For...

PT-2025-12645

Name of the Vulnerable Software and Affected Versions Easy Page Transition versions n/a through 1.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can injec...

PT-2025-12583

Name of the Vulnerable Software and Affected Versions Atikul AI Preloader versions 1.0.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

PT-2025-12589

Name of the Vulnerable Software and Affected Versions Beautiful Link Preview versions 1.5.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-12648

Name of the Vulnerable Software and Affected Versions catchsquare WP Social Widget versions n/a through 2.2.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker c...

PT-2025-12603

Name of the Vulnerable Software and Affected Versions GMO Font Agent versions 1.6 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For GMO Font Agent...

PT-2025-12638

Name of the Vulnerable Software and Affected Versions WP Parallax Content Slider versions 0.9.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-12620

Name of the Vulnerable Software and Affected Versions Arefly Login Redirect versions 1.0.0 through 1.0.5 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

CVE-2025-30597: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iografica IG Shortcodes ig-shortcodes allows DOM-Based XSS.This issue affects IG Shortcodes: from n/a through = 3.1...

PT-2025-12586

Name of the Vulnerable Software and Affected Versions gopiplus Message ticker versions n/a through 9.3 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject maliciou...

CVE-2025-30610: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through = 2.2.7...

CVE-2025-30553: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Z.com byGMO GMO Font Agent gmo-font-agent allows Stored XSS.This issue affects GMO Font Agent: from n/a through = 1.6...

CVE-2025-30536: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zeitwesentech Beautiful Link Preview beautiful-link-preview allows Stored XSS.This issue affects Beautiful Link Preview: from n/a through = 1.5.0...

CVE-2025-25035: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 SP8, before 10.0.7 SP7, before 10.0.6 SP6 and Jalios Workplace 6.2, Jalios Workplace 6.1,...

PT-2025-11480

Name of the Vulnerable Software and Affected Versions FortiWLC versions 8.6.0 and earlier FortiWLC versions 8.5.3 and below FortiWLC versions 8.4.8 and below FortiWLC version 8.3.3 Description The issue is related to an improper neutralization of input during web page generation in the FortiWLC w...

PT-2025-11355

Name of the Vulnerable Software and Affected Versions: Debug-Bar-Extender versions 0.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inje...

CVE-2025-26895: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in maennchen1.de m1.DownloadList m1downloadlist allows DOM-Based XSS.This issue affects m1.DownloadList: from n/a through = 0.19...

PT-2025-11352

Name of the Vulnerable Software and Affected Versions: NotFound Random Image Selector versions n/a through 2.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS in the Random Image...

CVE-2025-26554: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nicola Mustone WP Discord Post wp-discord-post allows Reflected XSS.This issue affects WP Discord Post: from n/a through = 2.1.0...

CVE-2025-26553: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Spring Devs Pre Order Addon for WooCommerce – Advance Order/Backorder Plugin wc-pre-order allows Reflected XSS.This issue affects Pre Order Addon for WooCommerce – Advance Order/Backorder Plugin:...