WordPress plugin Adverts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Buckets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Highlight and Share – Social Text and Image Sharing 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...

PT-2025-38896

Name of the Vulnerable Software and Affected Versions Bitly versions through 2.7.4 Description A flaw exists in Bitly that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The vulnerability could potentially allow an...

WordPress plugin Double the Donation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

PT-2025-39002

Name of the Vulnerable Software and Affected Versions CodeSolz Better Find and Replace versions through 1.7.6 Description The software contains a flaw related to improper input handling during web page generation, which can lead to Stored Cross-site Scripting XSS. This allows an attacker to injec...

PT-2025-38937

Name of the Vulnerable Software and Affected Versions Nicu Micle Simple JWT Login versions through 3.6.4 Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for the injection of...

WordPress plugin Sitekit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

WordPress plugin bestweblayout Portfolio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

Akıllı Ticaret Smart Trade E-Commerce 跨站脚本漏洞

Akıllı Ticaret Smart Trade E-Commerce is a commerce system platform from Akıllı Ticaret, Turkey. A cross-site scripting vulnerability exists in Akıllı Ticaret Smart Trade E-Commerce versions prior to 4.5.0.0.1, which stems from improper input neutralization and could lead to a reflective cross-si...

WordPress plugin Gianism 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2025-38846

Name of the Vulnerable Software and Affected Versions Buckets versions through 0.3.9 Description The software contains a flaw related to improper input handling during web page generation, which can lead to Stored Cross-site Scripting XSS. This allows an attacker to inject malicious scripts into...

PT-2025-38702

Name of the Vulnerable Software and Affected Versions Akıllı Ticaret Smart Trade E-Commerce versions prior to 4.5.0.0.1 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Reflected Cross-site Scripting XSS condition. This allows...

WordPress plugin Product Time Countdown for WooCommerce 多款产品跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38876

Name of the Vulnerable Software and Affected Versions NGG Smart Image Search versions through 3.4.3 Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for the injection of malicious...

WordPress plugin WPComplete 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

PT-2025-38764

Name of the Vulnerable Software and Affected Versions eleopard Behance Portfolio Manager versions through 1.7.4 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting XSS. This allows for the...

PT-2025-38777

Name of the Vulnerable Software and Affected Versions WP Chill Passster versions through 4.2.18 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to Cross-site Scripting XSS. This allows for the injection of...

PT-2025-39005

Name of the Vulnerable Software and Affected Versions BMI Adult & Kid Calculator versions through 1.2.2 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can b...

PT-2025-38703

Name of the Vulnerable Software and Affected Versions Horato Internet Technologies Ind. And Trade Inc. Virtual Library Platform versions prior to 20.0 Description The software contains a flaw related to improper input handling during web page generation, potentially leading to Reflected Cross-sit...