PT-2025-13727

Name of the Vulnerable Software and Affected Versions SoftHopper Custom Content Scrollbar versions 1.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

WordPress plugin Processing Projects cross-site scripting vulnerabilities

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exist...

PT-2025-13744

Name of the Vulnerable Software and Affected Versions crazycric Ultimate Live Cricket WordPress Lite versions 1.4.2 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS...

PT-2025-13741

Name of the Vulnerable Software and Affected Versions OpenMenu versions n/a through 3.5 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious scripts into...

PT-2025-13723

Name of the Vulnerable Software and Affected Versions Themesflat Addons For Elementor versions 2.2.5 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can injec...

PT-2025-13718

Name of the Vulnerable Software and Affected Versions IMPress for IDX Broker versions n/d through 3.2.3 Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means an attacker can inject malicious...

PT-2025-13742

Name of the Vulnerable Software and Affected Versions wpdiscover Timeline Event History versions 3.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Stored Cross-site Scripting XSS vulnerability. This allows for the...

PT-2025-13665

Name of the Vulnerable Software and Affected Versions Stylemix Cost Calculator Builder versions 3.2.65 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

CVE-2025-31608: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reDim GmbH CookieHint WP cookiehint-wp allows Stored XSS.This issue affects CookieHint WP: from n/a through = 1.0.0...

CVE-2025-31604: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Cal.com Cal.com cal-com allows Stored XSS.This issue affects Cal.com: from n/a through = 1.0.0...

CVE-2025-31574: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftHopper Custom Content Scrollbar custom-content-scrollbar allows Stored XSS.This issue affects Custom Content Scrollbar: from n/a through = 1.3...

CVE-2025-31538: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in checklistcom Checklist checklist allows Stored XSS.This issue affects Checklist: from n/a through = 1.1.9...

CVE-2025-31535: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PressTigers Simple Owl Carousel simple-owl-carousel allows DOM-Based XSS.This issue affects Simple Owl Carousel: from n/a through = 1.1.1...

Drupal AI operating system command injection vulnerability

Drupal AI is a module or solution for the Drupal community that integrates artificial intelligence capabilities. An operating system command injection vulnerability exists in Drupal AI versions prior to 1.0.5, which stems from improper neutralization of a special element and could lead to os...

PT-2025-13706

Name of the Vulnerable Software and Affected Versions Simple Owl Carousel versions 1.1.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker could potentially...

PT-2025-13739

Name of the Vulnerable Software and Affected Versions promoz73 Exit Popup Free versions 1.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicio...

Drupal AI operating system command injection vulnerability

Drupal AI is a module or solution for the Drupal community that integrates artificial intelligence capabilities. An operating system command injection vulnerability exists in Drupal AI versions prior to 1.0.5, which stems from improper neutralization of a special element and could lead to os...

PT-2025-13720

Name of the Vulnerable Software and Affected Versions Caspio Bridge Custom Database Applications by Caspio versions n/a through 2.1 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS. Th...

CVE-2025-31532: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Team AtomChat AtomChat atomchat allows Stored XSS.This issue affects AtomChat: from n/a through = 1.1.8...

PT-2025-13716

Name of the Vulnerable Software and Affected Versions Fusion versions 1.6.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker could potentially inject...