MediaWiki 安全漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the Wikimedia USA Foundation. The product can be used to deploy internal knowledge management and content management systems. MediaWiki suffers from a security vulnerability that stems from allowing malicious scripts to...

PT-2025-15765

Name of the Vulnerable Software and Affected Versions: Scott Salisbury Request Call Back versions n/a through 1.4.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

CVE-2025-27205

Adobe Experience Manager Screens versions FP11.3 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when...

CVE-2025-27205 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager Screens versions FP11.3 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when...

CVE-2025-27205

Adobe Experience Manager Screens FP11.3 and earlier are affected by a stored XSS (CWE-79) in vulnerable form fields. Exploitation requires a user to click a malicious link; impact is execution of JavaScript in the victim’s browser. Remediation per APSB25-32 is a security update from Adobe (update...

Cross-Site Scripting (XSS)

gifplayer is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient input sanitization or output escaping. Specifically, the application fails to properly handle or sanitize user-supplied input before including it in the webpage, which allows attackers to inject and...

PT-2025-15621 · Adobe · Experience Manager Screens

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager Screens versions FP11.3 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form field...

PT-2025-14962

Name of the Vulnerable Software and Affected Versions icopydoc Maps for WP versions 1.2.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can injec...

PT-2025-14972

Name of the Vulnerable Software and Affected Versions Musician's Pack for Elementor versions 1.8.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attack...

Yelp -- arbitrary file read

[email protected] reports: A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment...

Cross-site Scripting (XSS)

Overview drupal/core is an an open source content management platform powering millions of websites and applications. Affected versions of this package are vulnerable to Cross-site Scripting XSS via a Link field. An attacker with edit access via core web services, or a contrib or custom module...

PT-2025-14265

Name of the Vulnerable Software and Affected Versions Mashi Simple Map No Api versions 1.9 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inje...

PT-2025-14183 · Maksym Marko · Mx Time Zone Clocks

Name of the Vulnerable Software and Affected Versions: Maksym Marko MX Time Zone Clocks versions n/a through 5.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

PT-2025-14197

Name of the Vulnerable Software and Affected Versions devscred Design Blocks versions 1.2.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-14251

Name of the Vulnerable Software and Affected Versions Ajay WebberZone Snippetz versions n/a through 2.1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can...

PT-2025-14194

Name of the Vulnerable Software and Affected Versions BuddyPress Members Only versions 3.5.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables an attacker to inject...

PT-2025-14041

Name of the Vulnerable Software and Affected Versions Google Font Fix versions n/a through 2.3.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-14138

Name of the Vulnerable Software and Affected Versions HMH Footer Builder For Elementor versions 1.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

PT-2025-14034

Name of the Vulnerable Software and Affected Versions Kento WordPress Stats versions 1.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-13691

Name of the Vulnerable Software and Affected Versions Themeix Churel versions 1.0.0 through 1.0.8 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This enables potential attackers to inject...