CVE-2025-22546 WordPress jQuery TwentyTwenty plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Obaid Hossain jQuery TwentyTwenty js-twentytwenty allows Stored XSS.This issue affects jQuery TwentyTwenty: from n/a through = 1.0...

CVE-2025-22546

CVE-2025-22546 is an explicit Stored XSS in jQuery TwentyTwenty (WordPress plugin) due to improper input neutralization during web page generation. The affected product is jQuery TwentyTwenty (WordPress plugin) up to version 1.0, with a CVSS 3.1 base score of 6.5 (Medium); attack vector Network, ...

CVE-2025-22546 WordPress jQuery TwentyTwenty plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Obaid Hossain jQuery TwentyTwenty js-twentytwenty allows Stored XSS.This issue affects jQuery TwentyTwenty: from n/a through = 1.0...

CVE-2024-56287

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AppJetty WP jQuery DataTable wp-jquery-datatable allows Stored XSS.This issue affects WP jQuery DataTable: from n/a through = 4.0.1...

CVE-2024-56287 WordPress WP jQuery DataTable Plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AppJetty WP jQuery DataTable wp-jquery-datatable allows Stored XSS.This issue affects WP jQuery DataTable: from n/a through = 4.0.1...

CVE-2024-12499

The WP jQuery DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpjdt' shortcode in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-12499 WP jQuery DataTable <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WP jQuery DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpjdt' shortcode in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-12499 WP jQuery DataTable <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WP jQuery DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpjdt' shortcode in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-22546: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Obaid Hossain jQuery TwentyTwenty js-twentytwenty allows Stored XSS.This issue affects jQuery TwentyTwenty: from n/a through = 1.0...

CVE-2024-12499: Improper Neutralization of Input During Web Page Generation

The WP jQuery DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpjdt' shortcode in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

WordPress plugin WP jQuery DataTable cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

WordPress plugin jQuery TwentyTwenty has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-1870 · WordPress · Wp Jquery Datatable

Name of the Vulnerable Software and Affected Versions: WP jQuery DataTable plugin for WordPress versions up to, and including, 4.0.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'wp jdt' shortcode due to insufficient input sanitization and output escaping on...

WordPress plugin WP jQuery DataTable cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

CVE-2024-56287: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AppJetty WP jQuery DataTable wp-jquery-datatable allows Stored XSS.This issue affects WP jQuery DataTable: from n/a through = 4.0.1...

PT-2025-4537 · Unknown · Jquery Twentytwenty

Name of the Vulnerable Software and Affected Versions: jQuery TwentyTwenty versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (1.7.0), com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (1.7.0) +52 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.16)

org.apache.struts:struts2-core MAVEN version 2.3.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin 1.7.0 -...

com.amashchenko.struts2.actionflow:struts2-actionflow-plugin (>=1.5.3, <=2.0.0), com.amashchenko.struts2.actionflow:struts2-actionflow-showcase (>=1.5.3, <=2.0.0) +112 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.15.1)

org.apache.struts:struts2-core MAVEN version 2.3.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.amashchenko.struts2.actionflow:struts2-actionflow-plugin =1.5.3, =1.5.3, =2.0.0 -...

br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.4, <=3.0.1) +88 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.2.3.1)

org.apache.struts:struts2-core MAVEN version 2.2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - br.net.woodstock.rockframework:rockframework-struts2 =2.0.0, =1.2.4, =1.0.3, =3.2.0, =3.2.0,...

com.googlecode.s2rome:struts2-rome-plugin (0.3), com.jgeppert.struts2.jquery:struts2-jquery-chart-plugin (>=2.5.1, <=3.0.2) +44 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.2.1.1)

org.apache.struts:struts2-core MAVEN version 2.2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.googlecode.s2rome:struts2-rome-plugin 0.3 -...