CVE-2025-30875

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alexandre Froger WP Weixin wp-weixin allows Stored XSS.This issue affects WP Weixin: from n/a through = 1.3.16...

CVE-2025-58987 WordPress Football Pool Plugin <= 2.12.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AntoineH Football Pool football-pool allows Stored XSS.This issue affects Football Pool: from n/a through = 2.12.6...

PT-2025-36928

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: This issue involves improper neutralization of input during web page generation, potentially leading to Cross-site Scripting XSS. XSS occurs when an applicati...

WordPress plugin WP Weixin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

Baicells EG7035E-M11 跨站脚本漏洞

The Baicells EG7035E-M11 is an LTE base station from Baicells. A cross-site scripting vulnerability exists in the Baicells EG7035E-M11 BaiCEBM2.5.26NA version, which stems from improper input neutralization could lead to a cross-site scripting attack...

WordPress plugin WooCommerce Photo Reviews 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

WordPress plugin Blog Designer PRO 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-43786: Improper Neutralization of Input During Web Page Generation

Enumeration of ERC from object entry in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 and 7.4 GA through update 92 allow attackers to determine existent ERC in the application by exploit t...

PT-2025-36977

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a Cross-site Scripting XSS vulnerability. This issue could allow an attacker to inject unvalidated data, potentially leading to...

CVE-2025-58791

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arjan Olsder SEO Auto Linker wpa-seo-auto-linker allows Stored XSS.This issue affects SEO Auto Linker: from n/a through = 1.5.3...

CVE-2025-58867

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Download Media Counter easy-download-media-counter allows Stored XSS.This issue affects Easy Download Media Counter: from n/a through = 1.2...

CVE-2025-58823

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The African Boss Get Cash get-cash allows Stored XSS.This issue affects Get Cash: from n/a through = 3.2.3...

CVE-2025-58870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DeBAAT WP-GraphViz wp-graphviz allows DOM-Based XSS.This issue affects WP-GraphViz: from n/a through = 1.5.1...

CVE-2025-58790

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPKube Kiwi kiwi-social-share allows Stored XSS.This issue affects Kiwi: from n/a through = 2.1.8...

CVE-2025-58886

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tan Nguyen Instant Locations instant-locations allows Stored XSS.This issue affects Instant Locations: from n/a through = 1.0...

CVE-2025-58796

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dudaster Elementor Element Condition ele-conditions allows Stored XSS.This issue affects Elementor Element Condition: from n/a through = 1.0.5...

CVE-2025-58882

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in w1zzard Simple Text Slider simple-text-slider allows Stored XSS.This issue affects Simple Text Slider: from n/a through = 1.0.5...

CVE-2025-48103

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mulscully Today's Date Inserter todays-date-inserter allows Stored XSS.This issue affects Today's Date Inserter: from n/a through = 1.2.1...

CVE-2025-58876

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ali Aghdam Aparat Video Shortcode aparat-shortcode allows Stored XSS.This issue affects Aparat Video Shortcode: from n/a through = 0.2.4...

CVE-2025-58870

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DeBAAT WP-GraphViz wp-graphviz allows DOM-Based XSS.This issue affects WP-GraphViz: from n/a through = 1.5.1...