PT-2025-38933

Name of the Vulnerable Software and Affected Versions AnyClip Luminous Studio versions through 1.3.3 Description The AnyClip Luminous Studio software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for th...

WordPress plugin bestweblayout Portfolio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

Akıllı Ticaret Smart Trade E-Commerce 跨站脚本漏洞

Akıllı Ticaret Smart Trade E-Commerce is a commerce system platform from Akıllı Ticaret, Turkey. A cross-site scripting vulnerability exists in Akıllı Ticaret Smart Trade E-Commerce versions prior to 4.5.0.0.1, which stems from improper input neutralization and could lead to a reflective cross-si...

PT-2025-38703

Name of the Vulnerable Software and Affected Versions Horato Internet Technologies Ind. And Trade Inc. Virtual Library Platform versions prior to 20.0 Description The software contains a flaw related to improper input handling during web page generation, potentially leading to Reflected Cross-sit...

WordPress plugin WP Proposals 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2025-39055

Name of the Vulnerable Software and Affected Versions PenciDesign Penci Recipe versions through 4.0 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the potential execution ...

WordPress plugin Upsell Order Bump Offer for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...

PT-2025-38970

Name of the Vulnerable Software and Affected Versions Kama Click Counter versions through 4.0.4 Description A flaw exists in Kama Click Counter that allows for Stored Cross-site Scripting XSS. This issue arises from improper handling of user-supplied input during web page generation. The...

WordPress plugin Gianism 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

WordPress plugin Soledad 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2025-38977

Name of the Vulnerable Software and Affected Versions Tapfiliate versions through 3.2.2 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting issue. This allows for Stored XSS attacks. The issue involves the...

PT-2025-38839

Name of the Vulnerable Software and Affected Versions Brajesh Singh WordPress Widgets Shortcode versions through 1.0.3 Description The software contains a flaw due to improper handling of input during the creation of web pages, specifically a Stored Cross-site Scripting issue. This allows for the...

PT-2025-38846

Name of the Vulnerable Software and Affected Versions Buckets versions through 0.3.9 Description The software contains a flaw related to improper input handling during web page generation, which can lead to Stored Cross-site Scripting XSS. This allows an attacker to inject malicious scripts into...

PT-2025-38702

Name of the Vulnerable Software and Affected Versions Akıllı Ticaret Smart Trade E-Commerce versions prior to 4.5.0.0.1 Description The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Reflected Cross-site Scripting XSS condition. This allows...

PT-2025-38809

Name of the Vulnerable Software and Affected Versions tmatsuur Slightly troublesome permalink versions through 1.2.0 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that...

PT-2025-38777

Name of the Vulnerable Software and Affected Versions WP Chill Passster versions through 4.2.18 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to Cross-site Scripting XSS. This allows for the injection of...

PT-2025-39206

Name of the Vulnerable Software and Affected Versions WordPress versions through 6.8.2 Description A flaw exists in Automattic WordPress that allows for Stored Cross-site Scripting XSS. An attacker with Author or higher user privileges can exploit this issue. The vulnerability stems from improper...

WordPress plugin Product Catalog Simple Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38876

Name of the Vulnerable Software and Affected Versions NGG Smart Image Search versions through 3.4.3 Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for the injection of malicious...

PT-2025-38941

Name of the Vulnerable Software and Affected Versions Themepoints Carousel Ultimate versions through 1.8 Description The software contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting XSS. This issue enables malicious code...