PT-2025-13718

Name of the Vulnerable Software and Affected Versions IMPress for IDX Broker versions n/d through 3.2.3 Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means an attacker can inject malicious...

PT-2025-13727

Name of the Vulnerable Software and Affected Versions SoftHopper Custom Content Scrollbar versions 1.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

PT-2025-13764

Name of the Vulnerable Software and Affected Versions Carperfer CoverManager versions 0.0.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-13741

Name of the Vulnerable Software and Affected Versions OpenMenu versions n/a through 3.5 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious scripts into...

PT-2025-13723

Name of the Vulnerable Software and Affected Versions Themesflat Addons For Elementor versions 2.2.5 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can injec...

PT-2025-13754

Name of the Vulnerable Software and Affected Versions CookieHint WP versions n/a through 1.0.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-13767

Name of the Vulnerable Software and Affected Versions LABCAT Processing Projects versions 1.0.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker...

PT-2025-13739

Name of the Vulnerable Software and Affected Versions promoz73 Exit Popup Free versions 1.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicio...

PT-2025-13711

Name of the Vulnerable Software and Affected Versions Twice Commerce versions 1.3.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker could potentially injec...

PT-2025-13744

Name of the Vulnerable Software and Affected Versions crazycric Ultimate Live Cricket WordPress Lite versions 1.4.2 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS...

PT-2025-13742

Name of the Vulnerable Software and Affected Versions wpdiscover Timeline Event History versions 3.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Stored Cross-site Scripting XSS vulnerability. This allows for the...

PT-2025-13745

Name of the Vulnerable Software and Affected Versions Quantity Dynamic Pricing & Bulk Discounts for WooCommerce versions 4.0.0 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, which allows Stored XSS...

CVE-2025-2977: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in GFI KerioConnect 10.0.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component PDF File Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been...

CVE-2025-31412: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetProductGallery jet-woo-product-gallery allows DOM-Based XSS.This issue affects JetProductGallery: from n/a through = 2.1.22...

CVE-2025-31587: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider allows Stored XSS.This issue affects Elfsight Testimonials Slider: from n/a through = 1.0.1...

CVE-2025-31624: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LABCAT Processing Projects processing-projects allows DOM-Based XSS.This issue affects Processing Projects: from n/a through = 1.0.2...

CVE-2025-31532: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Team AtomChat AtomChat atomchat allows Stored XSS.This issue affects AtomChat: from n/a through = 1.1.8...

CVE-2025-31535: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PressTigers Simple Owl Carousel simple-owl-carousel allows DOM-Based XSS.This issue affects Simple Owl Carousel: from n/a through = 1.1.1...

CVE-2025-31538: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in checklistcom Checklist checklist allows Stored XSS.This issue affects Checklist: from n/a through = 1.1.9...

CVE-2025-31556: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through = 3.2.3...