PT-2025-20579 · Unknown · Code-Projects College Management System

Name of the Vulnerable Software and Affected Versions: code-projects Simple College Management System version 1.0 Description: A critical issue affects the Add New Student component, specifically the function input. The manipulation of the name/branch argument leads to a stack-based buffer...

PT-2025-20118 · Unknown · Ultimate Blocks

Name of the Vulnerable Software and Affected Versions: Ultimate Blocks versions n/a through 3.2.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS attacks. Recommendations: For...

PT-2025-20031 · Unknown · Boinc Server

Name of the Vulnerable Software and Affected Versions: BOINC Server versions through 1.4.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in BOINC Server. Recommendations: For BOI...

PT-2025-20170 · Unknown · Really Simple Under Construction Page

Name of the Vulnerable Software and Affected Versions: Really Simple Under Construction Page versions 1.4.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-19747 · Unknown · Retrieval-Based-Voice-Conversion-Webui

Name of the Vulnerable Software and Affected Versions: Retrieval-based-Voice-Conversion-WebUI versions 2.2.231006 and prior Description: Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. The variables exp dir1, among others, take user input and pass it to the cli...

CVE-2025-0756

Overview The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. CWE-99 Description Hitachi Vantara Pentaho Data Integration & Analytics...

PT-2025-17754 · Unknown · Popup Anything

Name of the Vulnerable Software and Affected Versions: Anything Popup versions n/a through 7.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS, where an attacker can inject maliciou...

PT-2025-17762

Name of the Vulnerable Software and Affected Versions Seriously Simple Podcasting versions prior to 3.9.0 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means an attacker can inject malicious...

PT-2025-17518 · Unknown · Visual Composer Website Builder

Name of the Vulnerable Software and Affected Versions: Visual Composer Website Builder versions through 45.10.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables attackers to...

PT-2025-17580 · Codemers · Codemers Klims

Name of the Vulnerable Software and Affected Versions: Codemers KLIMS version 1.6.DEV Description: The issue allows Python code injection. A user can provide Python code as an input value for a parameter or qualifier, such as for sorting, which will get executed on the server side. Recommendation...

PT-2025-17495 · Unknown · Event Post

Name of the Vulnerable Software and Affected Versions: Bastien Ho Event post versions n/a through 5.9.11 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS in the Event post. Recommendations:...

PT-2025-17113 · Unknown · Raptive Ads

Name of the Vulnerable Software and Affected Versions: Raptive Ads versions 3.7.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-16974 · WordPress · Wp-Asambleas

Name of the Vulnerable Software and Affected Versions: WP-Asambleas versions 2.85.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-17146 · WordPress · Wp-Businessdirectory

Name of the Vulnerable Software and Affected Versions: WP-BusinessDirectory versions through 3.1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For versions...

PT-2025-17136 · Unknown · Movylo Marketing Automation

Name of the Vulnerable Software and Affected Versions: Movylo Marketing Automation versions through 2.0.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker c...

PT-2025-17030 · WordPress · Autoglot – Automatic Wordpress Translation

Name of the Vulnerable Software and Affected Versions: Autoglot – Automatic WordPress Translation versions n/a through 2.4.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in...

PT-2025-17084 · WordPress · Websitedefender Wp Secure

Name of the Vulnerable Software and Affected Versions: WebsiteDefender wp secure versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-17067

Name of the Vulnerable Software and Affected Versions Kush Micro News versions 1.6.7 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For versions...

PT-2025-17165 · Unknown · Hive Support

Name of the Vulnerable Software and Affected Versions: Hive Support versions 1.2.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in Hive Support. Recommendations: For...

PT-2025-17153

Name of the Vulnerable Software and Affected Versions PickPlugins Question Answer versions 1.2.70 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacke...