PT-2025-10949

Name of the Vulnerable Software and Affected Versions: Ajay Sharma wordpress login form to anywhere versions n/a through 0.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for Cross-site Scripting XSS. Specifically, it enables Stored...

PT-2025-10959

Name of the Vulnerable Software and Affected Versions: Vivek Marakana Tabbed Login Widget versions 1.1.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This means that an attacker can inject...

PT-2025-10965

Name of the Vulnerable Software and Affected Versions: Lava Ajax Search versions 1.1.9 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This means that an attacker can inject malicious scripts into t...

PT-2025-10935

Name of the Vulnerable Software and Affected Versions: sumanbiswas013 Custom top bar versions n/a through 2.0.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for Cross-site Scripting XSS. Specifically, it enables Stored XSS...

PT-2025-10926

Name of the Vulnerable Software and Affected Versions: aumsrini Bee Layer Slider versions n/d through 1.1 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. Recommendations: For versions...

CVE-2025-28936: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sakurapixel Lunar lunar-sell-photos-online allows Stored XSS.This issue affects Lunar: from n/a through = 1.3.0...

PT-2025-10952

Name of the Vulnerable Software and Affected Versions: Shellbot Easy Image Display versions 1.2.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This enables attackers to inject...

CVE-2025-28926: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in popeating Post Read Time post-read-time allows Stored XSS.This issue affects Post Read Time: from n/a through = 1.2.6...

CVE-2025-28918: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in A. Jones Featured Image Thumbnail Grid thumbnail-grid allows Stored XSS.This issue affects Featured Image Thumbnail Grid: from n/a through = 6.8...

CVE-2025-28905: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chaser324 Featured Posts Grid featured-posts-grid allows Stored XSS.This issue affects Featured Posts Grid: from n/a through = 1.7...

CVE-2025-2210: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in aitangbao springboot-manager 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /sysJob/add. The manipulation of the argument name leads to cross site scripting. The attack can be launched remotely. The explo...

CVE-2025-28875: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shanebp BP Email Assign Templates bp-email-assign-templates allows Stored XSS.This issue affects BP Email Assign Templates: from n/a through = 1.6...

CVE-2025-25245: Improper Neutralization of Input During Web Page Generation

SAP BusinessObjects Business Intelligence Platform Web Intelligence contains a deprecated web application endpoint that is not properly secured. An attacker could take advantage of this by injecting a malicious url in the data returned to the user. On successful exploitation, there could be a...

CVE-2025-22623: Improper Neutralization of Input During Web Page Generation

Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php...

PT-2025-9441

Name of the Vulnerable Software and Affected Versions Top Bar – PopUps – by WPOptin versions 2.0.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendation...

PT-2025-9376

Name of the Vulnerable Software and Affected Versions NotFound Wibstats versions 0.5.5 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS in NotFound Wibstats. Recommendation...

PT-2025-9356

Name of the Vulnerable Software and Affected Versions Pit Login Welcome versions 1.1.5 and earlier Description The issue affects Pit Login Welcome, allowing Reflected XSS due to improper neutralization of input during web page generation. This can lead to Cross-site Scripting. Recommendations For...

PT-2025-9434

Name of the Vulnerable Software and Affected Versions Yahoo BOSS versions 0.7 and earlier Description The issue affects Yahoo BOSS, allowing for Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-site Scripting vulnerability. Recommendations...

PT-2025-9370

Name of the Vulnerable Software and Affected Versions Texteller versions 1.3.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For versions 1.3.0 and...

PT-2025-9467

Name of the Vulnerable Software and Affected Versions NotFound Mobile versions 1.3.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. Recommendations For versions 1.3.3 an...