Lucene search
+L

2180 matches found

RedhatCVE
RedhatCVE
•added 2025/02/04 10:15 p.m.•24 views

CVE-2024-35696

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Fahad Mahmood WP Docs allows Reflected XSS.This issue affects WP Docs: from n/a through 2.1.3...

7.1CVSS6.9AI score0.00327EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/04 12:00 a.m.•3 views

PT-2025-4609

Name of the Vulnerable Software and Affected Versions RTO GmbH Dynamic Conditions versions 1.7.4 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can inject...

6.5CVSS0.00263EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•6 views

CVE-2025-22664: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through = 5.1.3.5...

5.9CVSS5.8AI score0.00249EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•8 views

CVE-2025-23645: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Optimize Worldwide Find Content IDs find-content-ids allows Reflected XSS.This issue affects Find Content IDs: from n/a through = 1.0...

7.1CVSS5.8AI score0.00255EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•9 views

CVE-2025-24599: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issue affects Newsletters: from n/a through = 4.9.9.6...

7.1CVSS5.8AI score0.00255EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/03 12:00 a.m.•5 views

PT-2025-5403

Name of the Vulnerable Software and Affected Versions PlainInventory versions prior to 3.1.5 Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject malicious scripts into we...

7.1CVSS0.00334EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•5 views

CVE-2025-23591: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blulogistics1 blu Logistics blu-logistics allows Reflected XSS.This issue affects blu Logistics: from n/a through = 1.0.0...

7.1CVSS5.8AI score0.00315EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/03 12:00 a.m.•3 views

PT-2025-4964

Name of the Vulnerable Software and Affected Versions eMarksheet versions prior to 5.0 Description The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This means that an attacker can inject malicious scripts int...

7.1CVSS0.00308EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/02/03 12:00 a.m.•4 views

PT-2025-4618

Name of the Vulnerable Software and Affected Versions PickPlugins Job Board Manager versions prior to 2.1.60 Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject malicious...

7.1CVSS0.00324EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•4 views

CVE-2025-24781: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound WPJobBoard allows Reflected XSS. This issue affects WPJobBoard: from n/a through 5.10.1...

7.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•6 views

CVE-2025-22292: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Felipe Peixoto Powerful Auto Chat powers-triggers-of-woo-to-chat allows Stored XSS.This issue affects Powerful Auto Chat: from n/a through = 1.9.8...

6.5CVSS5.8AI score0.00313EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•6 views

CVE-2025-23491: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vikash Srivastava VSTEMPLATE Creator vstemplate-creator allows Reflected XSS.This issue affects VSTEMPLATE Creator: from n/a through = 2.0.2...

7.1CVSS5.8AI score0.00327EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/03 12:00 a.m.•3 views

PT-2025-4941

Name of the Vulnerable Software and Affected Versions MLL Audio Player MP3 Ajax versions 0.7 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

6.5CVSS0.00295EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•4 views

CVE-2025-24559: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in brandtoss WP Mailster wp-mailster allows Reflected XSS.This issue affects WP Mailster: from n/a through = 1.8.15.0...

7.1CVSS5.8AI score0.00317EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•5 views

CVE-2025-23593: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kvvaradha EmailPress emailpress allows Reflected XSS.This issue affects EmailPress: from n/a through = 1.0...

7.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/03 12:00 a.m.•4 views

PT-2025-5245

Name of the Vulnerable Software and Affected Versions Brainvireinfo Dynamic URL SEO versions n/a through 1.0 Description The issue is related to improper neutralization of input during web page generation, which allows for Cross-site Scripting XSS attacks, specifically Reflected XSS...

7.1CVSS0.00324EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•8 views

CVE-2024-13220: Improper Neutralization of Input During Web Page Generation

The WordPress Google Map Professional Map In Your Language WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS5.8AI score0.00581EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•8 views

CVE-2025-23987: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codegearthemes Designer designer allows DOM-Based XSS.This issue affects Designer: from n/a through = 1.6.4...

6.5CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•5 views

CVE-2025-22332: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shanaver CloudFlareR Cache Purge cloudflare-cache-purge allows Reflected XSS.This issue affects CloudFlareR Cache Purge: from n/a through = 1.2...

7.1CVSS5.8AI score0.00281EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•6 views

CVE-2025-22757: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard CodeBard Help Desk codebard-help-desk allows Stored XSS.This issue affects CodeBard Help Desk: from n/a through = 1.1.2...

6.5CVSS5.8AI score0.00257EPSS
SaveExploits0References1
Rows per page
Query Builder