Lucene search
+L

879 matches found

CNNVD
CNNVD
added 2025/12/31 12:00 a.m.11 views

WordPress plugin和WordPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

7.1CVSS5.7AI score0.00174EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.18 views

WordPress plugin Content Fetcher 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.0019EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.12 views

PT-2025-54327

Name of the Vulnerable Software and Affected Versions Wayne Allen Postie versions through 1.9.73 Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for the injection of malicious...

6.5CVSS5.9AI score0.00155EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/31 12:00 a.m.13 views

PT-2025-54401

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Omar Mohamed Mohamoud LIVE TV allows Reflected XSS.This issue affects LIVE TV: from n/a through 1.2...

7.1CVSS7.9AI score0.00221EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/31 12:00 a.m.16 views

WordPress plugin Audiomack 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00151EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/30 4:17 p.m.10 views

EUVD-2025-205812

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yada Wiki yada-wiki allows Stored XSS.This issue affects Yada Wiki: from n/a through 3.5...

6.5CVSS5.5AI score0.00155EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/30 4:15 p.m.17 views

CVE-2025-64190

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 8theme XStore Core et-core-plugin allows DOM-Based XSS.This issue affects XStore Core: from n/a through 5.6...

6.5CVSS0.00155EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/29 10:15 p.m.16 views

CVE-2025-68504

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSearch jet-search allows DOM-Based XSS.This issue affects JetSearch: from n/a through = 3.5.16...

6.5CVSS0.00204EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/29 6:15 p.m.10 views

CVE-2025-55063

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS0.0017EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/29 6:15 p.m.11 views

CVE-2025-55064

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS0.0017EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/29 6:15 p.m.14 views

CVE-2025-55062

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS0.0017EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/29 5:23 p.m.10 views

EUVD-2025-205628

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.1AI score0.0017EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/29 5:19 p.m.13 views

EUVD-2025-205621

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.1AI score0.0017EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/29 5:19 p.m.24 views

CVE-2025-55063

CVE-2025-55063 is described across multiple sources as CWE-79: improper neutralization of input during web page generation, i.e., a Cross-site Scripting (XSS) vulnerability. The connected documents consistently identify XSS as the core issue (improper input neutralization) but do not provide prec...

4.8CVSS6.2AI score0.0017EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/29 5:18 p.m.16 views

EUVD-2025-205625

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.1AI score0.0017EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.11 views

Priority Web 跨站脚本漏洞

Priority Web is the Web side of an Enterprise Resource Planning system from Priority Israel. A cross-site scripting vulnerability exists in Priority Web that stems from improper input neutralization and could lead to a cross-site scripting attack...

4.8CVSS5.6AI score0.0017EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/29 12:00 a.m.11 views

PT-2025-53766

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The software is susceptible to a cross-site scripting XSS issue due to improper input neutralization during web page generation. This allows for the injection o...

4.8CVSS6AI score0.0017EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/12/25 3:30 p.m.11 views

EUVD-2025-205376

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Aidango allows Cross-Site Scripting XSS.This issue affects Aidango: before 2.144.4...

7.6CVSS5.4AI score0.00311EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/25 1:18 p.m.38 views

CVE-2025-2307 XSS in Verisay Communication's Aidango

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Aidango allows Cross-Site Scripting XSS. This issue affects Aidango: before 2.144.4...

7.6CVSS0.00311EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/12/25 12:00 a.m.20 views

Microsoft Azure Cosmos DB Spoofing Vulnerability

Microsoft Azure Cosmos DB is a distributed multi-model database from Microsoft USA. A spoofing vulnerability exists in Microsoft Azure Cosmos DB that stems from improper input neutralization and can be exploited by an attacker to cause a network spoofing attack...

8.3CVSS6.7AI score0.00712EPSS
SaveExploits0References1
Rows per page
Query Builder