PT-2025-39031

Name of the Vulnerable Software and Affected Versions StellarWP WPComplete versions through 2.9.5.2 Description An issue exists in StellarWP WPComplete that allows for Stored Cross-site Scripting XSS. The issue is due to improper neutralization of input during web page generation. This could allo...

WordPress plugin Highlight and Share – Social Text and Image Sharing 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...

WordPress plugin Gravitate Automated Tester 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38971

Name of the Vulnerable Software and Affected Versions Last Updated Shortcode versions through 1.0.1 Description The Last Updated Shortcode software contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting XSS. This means that...

WordPress plugin WP Category Dropdown 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38771

Name of the Vulnerable Software and Affected Versions CK MacLeod Category Featured Images Extended versions through 1.52 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that...

WordPress plugin Participants Database 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38994

Name of the Vulnerable Software and Affected Versions davaxi Goracash versions through 1.1 Description The software contains a flaw related to improper input handling during web page generation, which can lead to Stored Cross-site Scripting XSS. This allows an attacker to inject malicious scripts...

PT-2025-39011

Name of the Vulnerable Software and Affected Versions DAEXT Import Markdown versions through 1.14 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a Stored Cross-Site Scripting XSS condition. This allows an attacker to...

jhttpd Arbitrary Command Execution

The vulnerability of the jhttpd component in the D-Link DI-500WF router microprogramming system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-8664

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities E-Municipality Management allows Cross-Site Scripting XSS. This issue affects StarCities E-Municipality Management: before 20250825...

CVE-2025-8664 XSS in Saysis Computer Systems' StarCities

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities E-Municipality Management allows Cross-Site Scripting XSS. This issue affects StarCities E-Municipality Management: before 20250825...

CVE-2025-8664

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities E-Municipality Management allows Cross-Site Scripting XSS. This issue affects StarCities E-Municipality Management: before 20250825...

Vizly Web Design Real Estate Packages 跨站脚本漏洞

Vizly Web Design Real Estate Packages is a web design template for real estate presentations from Vizly Web Design in Turkey. A cross-site scripting vulnerability exists in Vizly Web Design Real Estate Packages versions prior to 5.1 that stems from improper input neutralization and could lead to...

CVE-2025-6575

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dolusoft Omaspot allows Reflected XSS. This issue affects Omaspot: before 12.09.2025...

CVE-2025-2404

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ubit Information Technologies STOYS allows Cross-Site Scripting XSS.This issue affects STOYS: from 2 before 20250916...

CVE-2025-0547

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Paraşüt Software Bizmu allows Cross-Site Scripting XSS. This issue affects Bizmu: from 2.27.0 through 20250212...

CVE-2025-0547 XSS in Mikrogrup's Bizmu

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Paraşüt Software Bizmu allows Cross-Site Scripting XSS. This issue affects Bizmu: from 2.27.0 through 20250212...

CVE-2025-10642: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in wangchenyi1996 chatforum up to 80bdb92f5b460d36cab36e530a2c618acef5afd2. This impacts an unknown function of the file /q.php. Such manipulation of the argument path leads to cross site scripting. The attack may be launched remotely. This product operates on a...

CVE-2025-0879

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Shopside Software Shopside App allows Cross-Site Scripting XSS. This issue requires high privileges. This issue affects Shopside App: before 17.02.2025...