PT-2025-9441

Name of the Vulnerable Software and Affected Versions Top Bar – PopUps – by WPOptin versions 2.0.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendation...

PT-2025-9438

Name of the Vulnerable Software and Affected Versions Implied Cookie Consent versions 1.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For Implied Cookie...

PT-2025-9434

Name of the Vulnerable Software and Affected Versions Yahoo BOSS versions 0.7 and earlier Description The issue affects Yahoo BOSS, allowing for Reflected XSS due to improper neutralization of input during web page generation. This is a type of Cross-site Scripting vulnerability. Recommendations...

PT-2025-9428

Name of the Vulnerable Software and Affected Versions NotFound UniTimetable versions 1.1 and earlier Description The issue affects the UniTimetable, allowing for Stored XSS due to improper neutralization of input during web page generation. Recommendations For versions 1.1 and earlier, update to ...

PT-2025-9496

Name of the Vulnerable Software and Affected Versions WOO Codice Fiscale versions 1.6.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations For...

PT-2025-9498

Name of the Vulnerable Software and Affected Versions NotFound Flashfader versions 1.1.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it allows for Reflected XSS...

PT-2025-9483

Name of the Vulnerable Software and Affected Versions Zigaform – Price Calculator & Cost Estimation Form Builder Lite versions n/a through 7.4.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for...

PT-2025-9475

Name of the Vulnerable Software and Affected Versions Bowo Variable Inspector versions n/a through 2.6.2 Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it allows Reflected XSS...

PT-2025-9469

Name of the Vulnerable Software and Affected Versions Events Planner versions 1.3.10 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For versions 1.3.10...

PT-2025-9348

Name of the Vulnerable Software and Affected Versions RS Survey versions n/a through 1.0 Description The issue affects the richestsoft RS Survey, allowing for Reflected XSS due to improper neutralization of input during web page generation. Recommendations For versions n/a through 1.0, update to ...

WordPress plugin NotFound ntp-header-images: cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

PT-2025-9493

Name of the Vulnerable Software and Affected Versions NotFound DB Tables Import/Export versions 1.0.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability, specifically Reflected XSS...

PT-2025-9330

Name of the Vulnerable Software and Affected Versions TinyMCE Extended Config versions 0.1.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For version...

PT-2025-9335

Name of the Vulnerable Software and Affected Versions AW WooCommerce Kode Pembayaran versions 1.1.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendatio...

PT-2025-9336

Name of the Vulnerable Software and Affected Versions NotFound Awesome Twitter Feeds versions 1.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions 1...

PT-2025-9329

Name of the Vulnerable Software and Affected Versions NotFound ntp-header-images versions 1.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For versio...

PT-2025-9327

Name of the Vulnerable Software and Affected Versions Marekkis Watermark versions 0.9.4 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it allows for Reflected XSS...

PT-2025-9411

Name of the Vulnerable Software and Affected Versions CRUDLab Like Box versions 2.0.9 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For versions 2.0.9...

PT-2025-9405

Name of the Vulnerable Software and Affected Versions Easy School Registration versions 3.9.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions 3.9.8...

PT-2025-9407

Name of the Vulnerable Software and Affected Versions DN Sitemap Control versions 1.0.6 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in the DN Sitemap Control. Recommendation...