UBUNTU-CVE-2024-47090

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to XSS...

CVE-2024-38866 Livestatus Injection in dynmaps

Improper neutralization of input in Nagvis before version 1.9.47 which can lead to livestatus injection...

NagVis 安全漏洞

NagVis is a program from NagVis open source. Used to visualize your chosen monitoring core data in a user-friendly way. A security vulnerability exists in Nagvis versions prior to 1.9.47 that stems from improper input neutralization and could lead to a cross-site scripting attack...

PT-2025-22970 · Nagvis +1 · Nagvis +1

Name of the Vulnerable Software and Affected Versions: Nagvis versions prior to 1.9.47 Description: The issue is related to the improper neutralization of input in Nagvis, which can lead to XSS. Recommendations: For versions prior to 1.9.47, update to version 1.9.47 or later to resolve the issue...

The vulnerability of the getBlock() function in the monitoring and security management tool Trend Micro Apex Central allows a threat to execute arbitrary code.

The vulnerability of the getBlock function in the Trend Micro Apex Central security monitoring and management tool is related to the failure to take measures to neutralize specific elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-1985

Due to improper neutralization of input during web page generation XSS an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device...

SUSE Manager Server 安全漏洞

SUSE Manager Server is an infrastructure management solution from SUSE Germany designed to simplify and secure the management of various Linux distributions. A security vulnerability exists in SUSE Manager Server versions prior to 5.0 that stems from improper neutralization and could lead to...

CVE-2025-46493

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wordwebsoftware Crossword Compiler Puzzles crossword-compiler-puzzles allows Stored XSS.This issue affects Crossword Compiler Puzzles: from n/a through = 14.5...

CVE-2025-47673

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Reflected XSS.This issue affects Arconix Shortcodes: from n/a through = 2.1.16...

CVE-2025-47611

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Khaled User Meta user-meta allows Reflected XSS.This issue affects User Meta: from n/a through = 3.1.2...

CVE-2025-46537

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ctltwp Section Widget section-widget allows Reflected XSS.This issue affects Section Widget: from n/a through = 3.3.1...

CVE-2025-48245

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal Quick Contact Form quick-contact-form allows Reflected XSS.This issue affects Quick Contact Form: from n/a through = 8.2.1...

CVE-2025-47673

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Reflected XSS.This issue affects Arconix Shortcodes: from n/a through = 2.1.16...

CVE-2025-47613

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

CVE-2025-46487

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sftranna EC Authorize.net ec-authorizenet allows Reflected XSS.This issue affects EC Authorize.net: from n/a through = 0.3.3...

CVE-2025-46448

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reifsnyderb Document Management System dms allows Reflected XSS.This issue affects Document Management System: from n/a through = 1.24...

CVE-2025-46437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tayoricom Tayori Form tayori allows Reflected XSS.This issue affects Tayori Form: from n/a through = 1.2.9...

CVE-2025-46440

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark kStats Reloaded kstats-reloaded allows Reflected XSS.This issue affects kStats Reloaded: from n/a through = 0.7.4...

CVE-2025-39502

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Goodlayers Hostel gdlr-hostel allows Reflected XSS.This issue affects Goodlayers Hostel: from n/a through = 3.1.2...

CVE-2025-46440

CVE-2025-46440 is a Reflected Cross-Site Scripting vulnerability in WordPress kStats Reloaded (versions <= 0.7.4). The issue is caused by improper input neutralization during web page generation, enabling reflected XSS. Public sources (NVD/Red Hat entries) describe the vulnerability and affect...