CVE-2025-26587: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nghorta sidebarTabs sidebartabs allows Reflected XSS.This issue affects sidebarTabs: from n/a through = 3.1...

CVE-2025-27278: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Ghedini AcuGIS Leaflet Maps mapfig-premium-leaflet-map-maker allows Reflected XSS.This issue affects AcuGIS Leaflet Maps: from n/a through = 5.1.1.0...

CVE-2025-25119: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alejandro Aranda Woocommerce osCommerce Sync woo-oscommerce-sync allows Reflected XSS.This issue affects Woocommerce osCommerce Sync: from n/a through = 2.0.20...

CVE-2025-23716: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JkmAS Login Watchdog login-watchdog allows Stored XSS.This issue affects Login Watchdog: from n/a through = 1.0.4...

CVE-2025-25108: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shalomworld SW Plus shalom-world-media-gallery allows Reflected XSS.This issue affects SW Plus: from n/a through = 2.1...

CVE-2025-23587: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashek Al Mahmud all-in-one-box-login all-in-one-login allows Reflected XSS.This issue affects all-in-one-box-login: from n/a through = 2.0.1...

PT-2025-9371

Name of the Vulnerable Software and Affected Versions Userbase Access Control versions 1.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it allows Reflected XSS...

CVE-2025-23468: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wrenchpilot Essay Wizard wpCRES essay-wizard-wpcres allows Reflected XSS.This issue affects Essay Wizard wpCRES: from n/a through = 1.0.6.4...

PT-2025-9416

Name of the Vulnerable Software and Affected Versions First Comment Redirect versions 1.0.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a Reflected XSS...

PT-2025-9496

Name of the Vulnerable Software and Affected Versions WOO Codice Fiscale versions 1.6.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations For...

PT-2025-9348

Name of the Vulnerable Software and Affected Versions RS Survey versions n/a through 1.0 Description The issue affects the richestsoft RS Survey, allowing for Reflected XSS due to improper neutralization of input during web page generation. Recommendations For versions n/a through 1.0, update to ...

PT-2025-9455

Name of the Vulnerable Software and Affected Versions WP Church Center versions 1.3.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For versions 1.3.3 and...

WordPress plugin Swift Calendar Online Appointment Scheduling – Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2025-9403

Name of the Vulnerable Software and Affected Versions NotFound Ps Ads Pro versions 1.0.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. Recommendations For versions 1.0....

PT-2025-9370

Name of the Vulnerable Software and Affected Versions Texteller versions 1.3.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For versions 1.3.0 and...

PT-2025-9401

Name of the Vulnerable Software and Affected Versions Tax Report for WooCommerce versions prior to 2.2 Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it allows for Reflected XS...

PT-2025-9361

Name of the Vulnerable Software and Affected Versions G Web Pro Store Locator versions through 2.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions through...

PT-2025-9343

Name of the Vulnerable Software and Affected Versions melascrivi versions 1.4 and earlier Description The issue affects melascrivi, allowing Reflected XSS due to improper neutralization of input during web page generation. This can lead to Cross-site Scripting. Recommendations For melascrivi...

PT-2025-9344

Name of the Vulnerable Software and Affected Versions RSVP ME versions n/a through 1.9.9 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For versions n/a throug...

PT-2025-9407

Name of the Vulnerable Software and Affected Versions DN Sitemap Control versions 1.0.6 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in the DN Sitemap Control. Recommendation...