PT-2025-39014

Name of the Vulnerable Software and Affected Versions Sales Count Manager for WooCommerce versions through 2.5 Description A flaw exists in Sales Count Manager for WooCommerce that allows for Stored Cross-Site Scripting XSS. This issue involves improper neutralization of input during web page...

PT-2025-38919

Name of the Vulnerable Software and Affected Versions Jonathan Brinley DOAJ Export versions through 1.0.4 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, which can lead to Stored Cross-Site Scripting XSS. This allows an attacker...

PT-2025-38848

Name of the Vulnerable Software and Affected Versions Hamid Reza Yazdani E-namad & Shamed Logo Manager versions through 2.2 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting XSS. This...

WordPress plugin Fusion Page Builder Extension Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...

PT-2025-38823

Name of the Vulnerable Software and Affected Versions Chad Butler WP-Members versions through 3.5.4.2 Description The software contains a flaw related to improper input handling during web page generation, specifically a Cross-site Scripting issue. This allows for Stored XSS attacks. The issue...

编号撤回

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38858

Name of the Vulnerable Software and Affected Versions xnau webdesign Participants Database versions through 2.7.6.3 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means malicious script...

WordPress plugin LC Wizard 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

WordPress plugin Penci Portfolio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2025-38785

Name of the Vulnerable Software and Affected Versions Ricky Dawn Bot Block – Stop Spam Referrals in Google Analytics versions through 2.6 Description The software contains a flaw related to improper input handling during web page generation, leading to a Cross-site Scripting XSS issue. This...

PT-2025-38996

Name of the Vulnerable Software and Affected Versions AffiliateWP – External Referral Links versions through 1.2.0 Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for the injectio...

PT-2025-38886

Name of the Vulnerable Software and Affected Versions Techeshta Card Elements for WPBakery versions through 1.0.8 Description The software contains a flaw related to improper input handling during web page generation, leading to a DOM-Based Cross-site Scripting issue. This allows for the injectio...

PT-2025-39022

Name of the Vulnerable Software and Affected Versions Dialogity Free Live Chat versions through 1.0.3 Description A flaw exists in Dialogity Free Live Chat that allows for Stored Cross-site Scripting XSS. This issue occurs due to improper neutralization of input during web page generation. The...

PT-2025-38991

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CashBill CashBill.pl - Płatności WooCommerce allows Stored XSS. This issue affects CashBill.pl - Płatności WooCommerce: from n/a through 3.2.1...

CVE-2025-8664

The CVE-2025-8664 entry concerns StarCities E-Municipality Management from Saysis Computer Systems Trade Ltd. Co. with an XSS vulnerability due to improper input neutralization during web page generation. Affected versions are before 20250825. The PT-2025-38542 entry provides a remediation note t...

CVE-2025-0879

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Shopside Software Shopside App allows Cross-Site Scripting XSS. This issue requires high privileges. This issue affects Shopside App: before 17.02.2025...

CVE-2025-0420

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Paraşüt Software Paraşüt allows Cross-Site Scripting XSS.This issue affects Paraşüt: from 0.0.0.65efa44e through 20250204...

PT-2025-38527

Name of the Vulnerable Software and Affected Versions Vizly Web Design Real Estate Packages versions prior to 5.1 Description The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, also known as Cross-site Scripting XSS. This issue allows for Content...

PT-2025-38542

Name of the Vulnerable Software and Affected Versions Saysis Computer Systems Trade Ltd. Co. StarCities E-Municipality Management versions prior to 20250825 Description The software contains an Improper Neutralization of Input During Web Page Generation, which allows for Cross-Site Scripting XSS...

CVE-2024-12796

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Holistic IT, Consultancy Coop. Workcube ERP allows Reflected XSS.This issue affects Workcube ERP: from V12 - V14 before Cognitive...