CVE-2025-6948

Summary: CVE-2025-6948 affects GitLab CE/EE releases prior to 17.11.6, 18.0.4, and 18.1.2. The issue is due to improper handling of input that, under certain conditions, could allow an attacker to execute actions on behalf of users by injecting malicious content (a cross-site scripting scenario)....

CVE-2025-53488

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - WikiHiero Extension allows Stored XSS.This issue affects Mediawiki - WikiHiero Extension: from 1.43.X before 1.43.2...

CVE-2025-53488 Stored XSS in WikiHiero

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - WikiHiero Extension allows Stored XSS.This issue affects Mediawiki - WikiHiero Extension: from 1.43.X before 1.43.2...

WordPress plugin Halpes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Halpes, which stems from improper input neutralization and can be exploited by an attacker to tamper with web conte...

Wikimedia Mediawiki - FlaggedRevs Extension 安全漏洞

Wikimedia Mediawiki - FlaggedRevs Extension is a Wikimedia Foundation extension for flagging and reviewing revisions. A security vulnerability exists in Wikimedia Mediawiki - FlaggedRevs Extension versions prior to 1.43.2, which stems from improper input neutralization and could lead to a...

Wikimedia Mediawiki - Quiz Extension 安全漏洞

Wikimedia Mediawiki - Quiz Extension is a quiz tool extension from the Wikimedia Foundation. A security vulnerability exists in Wikimedia Mediawiki - Quiz Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from improper input neutralization and could lead to...

Wikimedia Mediawiki - WikiHiero Extension 安全漏洞

Wikimedia Mediawiki - WikiHiero Extension is a Wikimedia Foundation extension for displaying and editing ancient Egyptian hieroglyphics. A security vulnerability exists in Wikimedia Mediawiki - WikiHiero Extension versions prior to 1.43.2, which stems from improper input neutralization and could...

Wikimedia Mediawiki - MediaSearch Extension 安全漏洞

Wikimedia Mediawiki - MediaSearch Extension is a Wikimedia Foundation extension for search. A security vulnerability exists in Wikimedia Mediawiki - MediaSearch Extension versions prior to 1.39.13 and prior to 1.43.2, which stems from improper input neutralization and could lead to a stored...

CVE-2025-49247

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cmoreira Team Showcase team-showcase-cm allows DOM-Based XSS.This issue affects Team Showcase: from n/a through 25.05.13...

CVE-2025-28957

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OwnerRez OwnerRez API ownerrez allows Stored XSS.This issue affects OwnerRez API: from n/a through = 1.2.1...

CVE-2025-52796

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tggfref WP-Recall allows Reflected XSS. This issue affects WP-Recall: from n/a through 16.26.14...

CVE-2025-52798

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through 3.0.6...

CVE-2025-31037

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in favethemes Homey homey allows Reflected XSS.This issue affects Homey: from n/a through = 2.4.5...

CVE-2025-28968

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Prelovac WP Wall wp-wall allows Reflected XSS.This issue affects WP Wall: from n/a through = 1.7.3...

CVE-2025-24771

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Content Manager Light content-manager-light allows Reflected XSS.This issue affects Content Manager Light: from n/a through = 3.2...

CVE-2025-28978

CVE-2025-28978 describes a Reflected XSS in WordPress SB Breadcrumbs (vulnerable up to 1.0) due to improper input neutralization during web page generation. Affected software: SB Breadcrumbs (WordPress). Root cause: Improper Neutralization of Input During Web Page Generation. Base metrics indicat...

CVE-2025-31037

CVE-2025-31037 — Homey WordPress Theme

CVE-2025-39487

CVE-2025-39487 affects the WordPress Rankie plugin (Rankie)

CVE-2025-24757

Missing Authorization vulnerability in AndonDesign uDesign udesign.This issue affects uDesign: from n/a through = 4.11.2...

CVE-2025-30943

CVE-2025-30943 concerns WordPress plugin Posts Slider Shortcode . The vulnerability is due to improper neutralization of input during web page generation, enabling DOM-based XSS . Affected software is the Posts Slider Shortcode plugin for WordPress, versions up to 1.0 (likely inclusive). The CVE ...