CVE-2025-53500: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MassEditRegex Extension allows Stored XSS.This issue affects Mediawiki - MassEditRegex Extension: from 1.39.X before 1.39.12, from 1.42.X before 1.42.7, from...

CVE-2025-48939: Improper Neutralization of Special Elements

tarteaucitron.js is a compliant and accessible cookie banner. Prior to version 1.22.0, a vulnerability was identified in tarteaucitron.js where document.currentScript was accessed without verifying that it referenced an actual...

Wikimedia Mediawiki GoogleDocs4MW Extension 安全漏洞

The Wikimedia Mediawiki GoogleDocs4MW Extension is a Wikimedia Foundation extension for wiki projects. A security vulnerability in Wikimedia Mediawiki GoogleDocs4MW Extension version 1.42.7 prior to 1.42.x and 1.43.2 prior to 1.43.x, which stems from improper input neutralization, could lead to a...

CVE-2025-53494

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - TwoColConflict Extension allows Stored XSS.This issue affects Mediawiki - TwoColConflict Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, fr...

CVE-2025-53492 Stored XSS in MintyDocs

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MintyDocs Extension allows Stored XSS.This issue affects Mediawiki - MintyDocs Extension: from 1.43.X before 1.43.2...

CVE-2025-53492

The Wikimedia Foundation Mediawiki - MintyDocs Extension is vulnerable to a Stored Cross-site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This vulnerability affects versions 1.39.X , 1.42.X , and 1.43.X prior to 1.43.2 . An attacker could potentially e...

Improper Neutralization of Input Used for LLM Prompting

Overview @modelcontextprotocol/server-slack is a MCP server for interacting with Slack Affected versions of this package are vulnerable to Improper Neutralization of Input Used for LLM Prompting via the automatic link unfurling process. An attacker can access sensitive information by manipulating...

CVE-2025-53493 Stored XSS in MintyDocs

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MintyDocs Extension allows Stored XSS.This issue affects Mediawiki - MintyDocs Extension: from 1.43.X before 1.43.2...

CVE-2025-53493

The Wikimedia Foundation Mediawiki - MintyDocs Extension is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects versions 1.39.X through 1.43.1 . An attacker could potentially execute malicious scripts in th...

CVE-2025-53493 Stored XSS in MintyDocs

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MintyDocs Extension allows Stored XSS.This issue affects Mediawiki - MintyDocs Extension: from 1.43.X before 1.43.2...

CVE-2025-53494

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - TwoColConflict Extension allows Stored XSS.This issue affects Mediawiki - TwoColConflict Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, fr...

CentOS Web Panel Code Execution

The vulnerability of the CentOS Web Panel management application relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

CVE-2025-53493: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MintyDocs Extension allows Stored XSS.This issue affects Mediawiki - MintyDocs Extension: from 1.43.X before 1.43.2...

CVE-2025-53492: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MintyDocs Extension allows Stored XSS.This issue affects Mediawiki - MintyDocs Extension: from 1.43.X before 1.43.2...

CVE-2024-12915

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Devinim Software Library Software allows Reflected XSS. This issue affects Library Software: before 24.11.02...

Devinim Library 跨站脚本漏洞

Devinim Library is a library system from the Turkish company Devinim. A cross-site scripting vulnerability exists in Devinim Library versions prior to 24.11.02, which stems from improper input neutralization during web page generation and could lead to a reflective cross-site scripting attack...

CVE-2025-5730: Improper Neutralization of Input During Web Page Generation

The Contact Form Plugin WordPress plugin before 1.1.29 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks...

CVE-2025-3745: Improper Neutralization of Input During Web Page Generation

The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow malicious users to conduct XSS attacks...

CVE-2025-53296

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ecoal95 EC Stars Rating ec-stars-rating allows Stored XSS.This issue affects EC Stars Rating: from n/a through = 1.0.11...

UBUNTU-CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...