CVE-2025-47656

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Spiracle Themes Spiraclethemes Site Library spiraclethemes-site-library allows Stored XSS.This issue affects Spiraclethemes Site Library: from n/a through = 1.5.4...

CVE-2025-47499

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr Simple Blog Stats simple-blog-stats allows Stored XSS.This issue affects Simple Blog Stats: from n/a through = 20250416...

CVE-2025-47626

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in apasionados Submission DOM tracking for Contact Form 7 cf7-submission-dom-tracking allows Stored XSS.This issue affects Submission DOM tracking for Contact Form 7: from n/a through = 2.1...

CVE-2025-47547

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-email-marketing-newsletter allows Stored XSS.This issue affects SendPulse Email Marketing Newsletter: from n/a through = 2.1.6...

CVE-2025-0666

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7...

CVE-2025-0667

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7...

PT-2025-20606 · Ibm · Ibm Storage Scale

Name of the Vulnerable Software and Affected Versions: IBM Storage Scale versions 5.2.2.0 through 5.2.2.1 Description: The issue allows an authenticated user to execute privileged commands due to improper input neutralization. This is related to a command injection issue, specifically improper...

CVE-2025-47676

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Faiyaz Alam User Login History user-login-history allows Stored XSS.This issue affects User Login History: from n/a through = 2.1.6...

CVE-2025-47675

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woobox Woobox woobox allows DOM-Based XSS.This issue affects Woobox: from n/a through = 1.6...

CVE-2025-47665

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bistromatic N360 | Splash Screen n360-splash-screen allows Stored XSS.This issue affects N360 | Splash Screen: from n/a through = 1.0.6...

CVE-2025-47616

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kodezen LLC aBlocks ablocks allows Stored XSS.This issue affects aBlocks: from n/a through = 1.9.2...

CVE-2025-47615

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flowdee Amazon Product in a Post amazon-product-in-a-post-plugin allows Stored XSS.This issue affects Amazon Product in a Post: from n/a through = 5.2.2...

CVE-2025-47520

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Syed Balkhi Charitable charitable allows Stored XSS.This issue affects Charitable: from n/a through = 1.8.5.1...

CVE-2025-47522

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AWEOS GmbH AWEOS WP Lock aweos-wp-lock allows Stored XSS.This issue affects AWEOS WP Lock: from n/a through = 1.4.8...

CVE-2025-47506

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ajay Contextual Related Posts contextual-related-posts allows DOM-Based XSS.This issue affects Contextual Related Posts: from n/a through = 4.0.2...

CVE-2025-47443

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevart Widget Countdown widget-countdown allows Stored XSS.This issue affects Widget Countdown: from n/a through = 2.7.4...

CVE-2025-47686

CVE-2025-47686 concerns DELUCKS SEO (WordPress plugin) with stores XSS due to improper input neutralization during web page generation. Affected versions are n/a through 2.5.9. Public sources in the connected docs show the vulnerability as unpatched (no fix version provided) and listed remediatio...

CVE-2025-47676 WordPress User Login History plugin <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Faiyaz Alam User Login History user-login-history allows Stored XSS.This issue affects User Login History: from n/a through = 2.1.6...

CVE-2025-47676

CVE-2025-47676 affects WordPress plugin User Login History (versions up to 2.1.6). Description: Stored XSS due to improper input neutralization during web page generation. Exploitation status in provided docs: exploitation not indicated; CVSS 3.1 base score 6.5 (Media) with network attack vector,...

CVE-2025-47668 WordPress CookieCode plugin <= 2.4.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cookiecode CookieCode cookiecode allows Stored XSS.This issue affects CookieCode: from n/a through = 2.4.4...