CVE-2025-23941: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in meinturnierplan MeinTurnierplan.de Widget Viewer meinturnierplande-widget-viewer allows Stored XSS.This issue affects MeinTurnierplan.de Widget Viewer: from n/a through = 1.1...

PT-2025-5102

Name of the Vulnerable Software and Affected Versions WP-Revive Adserver versions prior to 2.2.1 Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This enables attackers to inject malicious scripts in...

PT-2025-5130

Name of the Vulnerable Software and Affected Versions RaminMT Links/Problem Reporter versions n/a through 2.6.0 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject...

PT-2025-5159

Name of the Vulnerable Software and Affected Versions Anshi Solutions Category D3 Tree versions n/a through 1.1 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. Recommendations For...

CVE-2025-22744

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seodev S-DEV SEO s-dev-seo allows Stored XSS.This issue affects S-DEV SEO: from n/a through = 1.88...

PT-2025-4444

Name of the Vulnerable Software and Affected Versions AGILELOGIX Free Google Maps versions 1.0.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

PT-2025-4665

Name of the Vulnerable Software and Affected Versions S-DEV SEO versions 1.88 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS attacks. Recommendations For S-DEV SEO versio...

PT-2025-4432

Name of the Vulnerable Software and Affected Versions Photo Gallery – Image Gallery by Ape versions prior to 2.2.8 Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject...

PT-2025-4686

Name of the Vulnerable Software and Affected Versions Zarinpal Paid Download versions n/a through 2.3 Description The issue affects Masoud Amini Zarinpal Paid Download, allowing Reflected XSS due to improper neutralization of input during web page generation. This enables attackers to inject...

PT-2025-4669

Name of the Vulnerable Software and Affected Versions SetMore Theme – Custom Post Types versions 1.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means an attacker can inject malicio...

PT-2025-4695

Name of the Vulnerable Software and Affected Versions wp-pano versions 1.17 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means an attacker can inject malicious scrip...

PT-2025-4702

Name of the Vulnerable Software and Affected Versions CoDesigner WooCommerce Builder for Elementor versions 4.7.17.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means an attacker ca...

CVE-2025-22797: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oğulcan Özügenç Gallery and Lightbox gallery-and-lightbox allows Stored XSS.This issue affects Gallery and Lightbox: from n/a through = 1.0.14...

CVE-2025-22788: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codexpert, Inc CoDesigner woolementor allows Stored XSS.This issue affects CoDesigner: from n/a through = 4.29...

CVE-2025-22769: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Brahma Multifox allows Stored XSS.This issue affects Multifox: from n/a through 1.3.7...

CVE-2025-22765: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weiluri WP Order By wp-order-by allows Reflected XSS.This issue affects WP Order By: from n/a through = 1.4.2...

CVE-2025-22764: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vipul Jariwala WP Post Corrector wp-post-corrector allows Reflected XSS.This issue affects WP Post Corrector: from n/a through = 1.0.2...

CVE-2025-22761: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Olaf Lederer Ajax Contact Form fws-ajax-contact-form allows Stored XSS.This issue affects Ajax Contact Form: from n/a through = 1.4.1...

CVE-2025-22755: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bavington WP Headmaster wp-headmaster allows Reflected XSS.This issue affects WP Headmaster: from n/a through = 0.3...

CVE-2025-22724: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MojofyWP Product Carousel For WooCommerce – WoorouSell allows Stored XSS.This issue affects Product Carousel For WooCommerce – WoorouSell: from n/a through 1.1.0...