Iocharger 安全漏洞

Iocharger is an electric vehicle charging and smart energy management solution from Galaxy Zhangtan iocharger, a Chinese company. Iocharger has a security vulnerability that stems from improper neutralization of specific elements...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal File Entity versions 7.X- through 7.X-2.38, which stems from improper input neutralization during page generation, resulting in a cross-site scriptin...

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Views SVG Animation prior to version 1.0.1, which stems from improper input neutralization during page generation, resulting in a cross-site scriptin...

PT-2025-15434 · Fortinet · Forticlient

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClient versions prior to 7.4.1 Description: The issue is related to an improper neutralization of input during web page generation, also known as Cross-site Scripting. This may allow the EMS administrator to send messages...

CVE-2024-50603

An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloudtype for...

CVE-2025-22354

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Code Themes Digi Store allows DOM-Based XSS.This issue affects Digi Store: from n/a through 1.1.4...

CVE-2025-22296

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hashthemes Hash Elements hash-elements.This issue affects Hash Elements: from n/a through = 1.5.0...

CVE-2025-22296

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HashThemes Hash Elements.This issue affects Hash Elements: from n/a through 1.4.9...

CVE-2025-22365 WordPress EMC2 Alert Boxes Plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eric McNiece EMC2 Alert Boxes allows Stored XSS.This issue affects EMC2 Alert Boxes: from n/a through 1.3...

CVE-2025-22581

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bytephp Arcade Ready arcadeready allows Stored XSS.This issue affects Arcade Ready: from n/a through = 1.1...

CVE-2025-22580

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Auto IT Biltorvet Dealer Tools biltorvet-dealer-tools allows Stored XSS.This issue affects Biltorvet Dealer Tools: from n/a through = 1.0.22...

CVE-2025-22572

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brian Legacy ePlayer sportspress-tv allows Stored XSS.This issue affects Legacy ePlayer: from n/a through = 0.9.9...

CVE-2025-22544

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mind Doodle Mind Doodle Visual Sitemaps & Tasks mind-doodle-sitemap allows Stored XSS.This issue affects Mind Doodle Visual Sitemaps & Tasks: from n/a through = 1.6...

CVE-2025-22532

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in snagysandor Simple Photo Sphere simple-photo-sphere allows Stored XSS.This issue affects Simple Photo Sphere: from n/a through = 0.0.10...

CVE-2024-56056

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kmfoysal06 SimpleCharm simplecharm allows Reflected XSS.This issue affects SimpleCharm: from n/a through = 1.4.3...

CVE-2025-22338

CVE-2025-22338 : Reflected XSS in WP-tagMaker (WordPress plugin) due to improper neutralization of input during web page generation. Affects WP-tagMaker versions up to and including 0.2.2 (n/a through 0.2.2). CVSSv3.1 base score 7.1 (High; Network), with user interaction required. Root cause: inp...

CVE-2025-22519 WordPress eDoc Easy Tables Plugin <= 1.29 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in eDoc Intelligence LLC eDoc Easy Tables allows SQL Injection.This issue affects eDoc Easy Tables: from n/a through 1.29...

CVE-2025-22532 WordPress Simple Photo Sphere plugin <= 0.0.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in snagysandor Simple Photo Sphere simple-photo-sphere allows Stored XSS.This issue affects Simple Photo Sphere: from n/a through = 0.0.10...

CVE-2025-22550

CVE-2025-22550 affects AddFunc Mobile Detect (WordPress plugin). The issue is a Stored Cross-Site Scripting vulnerability in AddFunc Mobile Detect &lt;= 3.1, caused by improper input neutralization during web page generation. Impact is stored XSS as described in multiple sources; no public exploi...

CVE-2024-52891

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow an authenticated user to inject malicious information or obtain information from log files due to improper log neutralization...