Cross-Site Scripting (XSS)

dom-expressions is vulnerable to Cross-site Scripting XSS. The vulnerability is due to the use of .replace with special replacement patterns $' or $\ in user-defined attributes of the Meta tag, allows an attackers can exploit this by injecting malicious payloads into meta tags, potentially...

CVE-2025-27108

dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's .replace opens up to potential Cross-site Scripting XSS vulnerabilities with the special replacement patterns beginning with $. Particularly, when the attributes of Meta tag from...

CVE-2025-27108

dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's ".replace" opens up to potential Cross-site Scripting XSS vulnerabilities with the special replacement patterns beginning with "$". Particularly, when the attributes of "Meta" tag...

PT-2025-7633 · Unknown · Dom-Expressions

Name of the Vulnerable Software and Affected Versions: dom-expressions versions prior to 0.39.5 Description: The issue arises from the use of JavaScript's .replace function, which opens up to potential Cross-site Scripting XSS vulnerabilities with special replacement patterns beginning with $...

CVE-2025-27108: Improper Neutralization of Input During Web Page Generation

dom-expressions is a Fine-Grained Runtime for Performant DOM Rendering. In affected versions the use of javascript's .replace opens up to potential Cross-site Scripting XSS vulnerabilities with the special replacement patterns beginning with $. Particularly, when the attributes of Meta tag from...

CVE-2025-22260

Missing Authorization vulnerability in Marcus aka @msykes Meta Tag Manager meta-tag-manager.This issue affects Meta Tag Manager: from n/a through = 3.1...

CVE-2025-22260

Missing Authorization vulnerability in Marcus aka @msykes Meta Tag Manager meta-tag-manager.This issue affects Meta Tag Manager: from n/a through = 3.1...

CVE-2025-22260 WordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pixelite Meta Tag Manager. This issue affects Meta Tag Manager: from n/a through 3.1...

CVE-2025-22260

CVE-2025-22260: Missing Authorization in WordPress Meta Tag Manager plugin (Pixelite) affects versions n/a through 3.1. CVSS v3.1 base score 4.3 (Medium); impact is limited to Missing Authorization. Connected sources confirm the vulnerability name, affected version range, and that it stems from B...

CVE-2025-22260 WordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marcus aka @msykes Meta Tag Manager meta-tag-manager.This issue affects Meta Tag Manager: from n/a through = 3.1...

CVE-2025-22260: Missing Authorization

Missing Authorization vulnerability in Marcus aka @msykes Meta Tag Manager meta-tag-manager.This issue affects Meta Tag Manager: from n/a through = 3.1...

PT-2025-4399 · Unknown · Pixelite Meta Tag Manager

Name of the Vulnerable Software and Affected Versions: Pixelite Meta Tag Manager versions n/a through 3.1 Description: The issue is related to a Missing Authorization vulnerability in the Meta Tag Manager. This vulnerability affects the Meta Tag Manager from version n/a through 3.1...

WordPress plugin Meta Tag Manager security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Meta Tag Manager versions = 3.1...

CentOS 7 : thunderbird (RHSA-2022:6710)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6710 advisory. - When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects...

AZL-43182 CVE-2024-1984 affecting package graphene 1.10.8-1

The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2. This makes it possible for unauthenticated individuals to obtain post contents of password protected posts via the generated source...

AZL-43177 CVE-2024-1984 affecting package graphene 1.10.4-3

The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2. This makes it possible for unauthenticated individuals to obtain post contents of password protected posts via the generated source...

CVE-2024-1984

The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2. This makes it possible for unauthenticated individuals to obtain post contents of password protected posts via the generated source...

CVE-2024-1984 Graphene <= 2.9.2 - Missing Authorization

The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2. This makes it possible for unauthenticated individuals to obtain post contents of password protected posts via the generated source...

CVE-2024-1984

The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2. This makes it possible for unauthenticated individuals to obtain post contents of password protected posts via the generated source...