WordPress plugin WP Mail 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-36212

Name of the Vulnerable Software and Affected Versions: pusheco Pushe Web Push Notification versions through 0.5.0 Description: The software contains a cross-site scripting XSS vulnerability due to improper neutralization of input during web page generation. This allows for stored XSS attacks...

WordPress plugin WP-GraphViz 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

PT-2025-36169

Name of the Vulnerable Software and Affected Versions: Parallax Scrolling Enllax.js versions through 0.0.6 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations:...

PT-2025-36177

Name of the Vulnerable Software and Affected Versions: Zakir Smooth Accordion versions through 2.1 Description: The software contains a cross-site scripting XSS issue that allows for stored XSS attacks due to improper neutralization of input during web page generation. Recommendations: Update Zak...

PT-2025-36214

Name of the Vulnerable Software and Affected Versions: Sudar Muthu WP Github Gist versions n/a through 0.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Sud...

WordPress plugin 코드엠샵 소셜톡 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress plugin Comment Form WP – Customize Default Comment Form 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Comment Form WP - Customize Default...

PT-2025-36124

Name of the Vulnerable Software and Affected Versions: ARI Fancy Lightbox versions through 1.4.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, specifically a Stored Cross-site Scripting XSS issue. This allows for the injection of...

WordPress plugin WordPress Events Calendar Plugin – connectDaily 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WordPress Events Calendar...

PT-2025-36171

Name of the Vulnerable Software and Affected Versions: webvitaly Search by Google versions through 1.9 Description: The webvitaly Search by Google application contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS...

CVE-2024-13073 XSS in Akinsoft's TaskPano

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft TaskPano allows Cross-Site Scripting XSS. This issue affects TaskPano: s1.06.04...

CVE-2025-58640

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MatrixAddons Document Engine document-engine allows Stored XSS.This issue affects Document Engine: from n/a through = 1.2...

CVE-2025-58620

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Stored XSS.This issue affects PDF for WPForms: from n/a through = 6.2.1...

CVE-2025-58614

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jamel.Z Tooltipy bluet-keywords-tooltip-generator allows Stored XSS.This issue affects Tooltipy: from n/a through = 5.5.6...

CVE-2025-58596

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in properfraction MailOptin mailoptin allows Stored XSS.This issue affects MailOptin: from n/a through = 1.2.75.0...

CVE-2025-58612 WordPress PropertyHive Plugin <= 2.1.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Property Hive PropertyHive propertyhive allows Stored XSS.This issue affects PropertyHive: from n/a through = 2.1.5...

CVE-2024-13064 XSS in Akinsoft's MyRezzta

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft MyRezzta allows Cross-Site Scripting XSS. This issue affects MyRezzta: from s2.02.02 before v2.05.01...

CVE-2024-13064 XSS in Akinsoft's MyRezzta

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft MyRezzta allows Cross-Site Scripting XSS. This issue affects MyRezzta: from s2.02.02 before v2.05.01...

Akinsoft MyRezzta 跨站脚本漏洞

Akinsoft MyRezzta is an online food ordering system from the Turkish company Akinsoft. A cross-site scripting vulnerability exists in Akinsoft MyRezzta versions prior to s2.02.02 to v2.05.01, which stems from improper input neutralization during web page generation and can lead to cross-site...