WordPress plugin WP Super Edit has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Nifty Backups has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

WordPress plugin Simple Finance Calculator has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Triss has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2025-43344

Name of the Vulnerable Software and Affected Versions Pie Calendar versions through 1.2.9 Description The software contains a flaw due to improper neutralization of input during web page generation, which may allow for cross-site scripting. Recommendations Update Pie Calendar to a version later...

TP-Link Omada Network Gateway Command Injection

The vulnerability of TP-Link Omada network gateways’ microprogramming software is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands on the operating system...

CVE-2025-10612 XSS in GiSoft's City Guide

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in giSoft Information Technologies City Guide allows Reflected XSS. This issue affects City Guide: before 1.4.45...

EUVD-2025-35158

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in giSoft Information Technologies City Guide allows Reflected XSS.This issue affects City Guide: before 1.4.45...

CVE-2025-62702

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - PageTriage Extension allows Stored XSS.This issue affects Mediawiki - PageTriage Extension: from master before 1.44...

CVE-2025-62695 Stored XSS through system messages

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Stored XSS.This issue affects Mediawiki - WikiLambda Extension: master...

MediaWiki - PageTriage Extension security vulnerabilities

MediaWiki - PageTriage Extension is an open source page triage extension for MediaWiki. A security vulnerability exists in MediaWiki - PageTriage Extension versions prior to 1.44, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...

PT-2025-42859

Name of the Vulnerable Software and Affected Versions Mediawiki - WikiLambda Extension versions prior to master. Description A flaw exists in the Mediawiki - WikiLambda Extension related to improper input neutralization during web page generation, leading to a Stored Cross-site Scripting XSS...

CVE-2025-62657

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS.This issue affects MediaWiki PageForms extension: 1.44...

CVE-2025-62657

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS.This issue affects MediaWiki PageForms extension: 1.44...

CVE-2025-62670

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - FlexDiagrams Extension allows Stored XSS.This issue affects Mediawiki - FlexDiagrams Extension: master...

CVE-2025-62652

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...

CVE-2025-62667

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Stored XSS.This issue affects Mediawiki - GrowthExperiments Extension: from master before 1.39...

MediaWiki GlobalBlocking Extension security vulnerability

Mediawiki GlobalBlocking Extension is an extension of the Wikimedia Foundation USA. A security vulnerability exists in Mediawiki GlobalBlocking Extension versions 1.43 and 1.44, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...

PT-2025-42801

Name of the Vulnerable Software and Affected Versions Mediawiki - ExternalGuidance versions prior to 1.39 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Stored Cross-site Scripting XSS condition. This allows for the...

MediaWiki - PageForms extension security vulnerabilities

MediaWiki - PageForms extension is an open source page editing plugin for MediaWiki. A security vulnerability exists in MediaWiki - PageForms extension version 1.44, which stems from improper input neutralization and could lead to a stored cross-site scripting attack...