CVE-2025-30527

CVE-2025-30527 involves My Bootstrap Menu (WordPress plugin). The connected Wordfence vulnerability entry identifies the affected software as My Bootstrap Menu and states vulnerability from earlier versions up to 1.2.1, describing an "Authenticated" stored Cross-Site Scripting (XSS) due to improp...

CVE-2025-23488

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Abolfazl Sabagh rng-refresh rng-refresh allows Reflected XSS.This issue affects rng-refresh: from n/a through = 1.0...

WordPress plugin WpF Ultimate Carousel 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Lenxel Core for Lenxel(LNX) LMS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

CVE-2022-23790

CVE-2022-23790: The Firmanet Software and Technology Customer Relation Manager has an XSS flaw caused by improper neutralization of input during web page generation. Affects versions prior to 2022.03.13. PT-Security documents indicate a remediation path: update to a patch released after 2022.03.1...

CVE-2022-26114

An improper neutralization of input during web page generation vulnerability CWE-79 in the Webmail of FortiMail before 7.2.0 may allow an unauthenticated attacker to trigger a cross-site scripting XSS attack via sending specially crafted mail messages...