13262 matches found
PT-2025-4954
Name of the Vulnerable Software and Affected Versions Explara Membership versions 0.0.0 through 0.0.7 Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This means an attacker can inject malicious scrip...
PT-2025-4908
Name of the Vulnerable Software and Affected Versions Simple Custom post type custom field versions 1.0.0 through 1.0.3 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This problem allows reflected XSS in the...
PT-2025-4884
Name of the Vulnerable Software and Affected Versions NotFound Simple shortcode buttons versions 1.3.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject...
PT-2025-5020 · Macme · Macme
Name of the Vulnerable Software and Affected Versions: MACME versions n/a through 1.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected XSS. This means that an attacker can inject malicious scripts into a website,...
CVE-2025-23846: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thaikolja Flexible Blogtitle flexible-blogtitle allows Reflected XSS.This issue affects Flexible Blogtitle: from n/a through = 0.1...
CVE-2025-23959: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Linus Lundahl Good Old Gallery good-old-gallery allows Reflected XSS.This issue affects Good Old Gallery: from n/a through = 2.1.2...
PT-2025-4974
Name of the Vulnerable Software and Affected Versions NotFound WH Cache & Security versions 1.1.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Reflected XSS. This means that an attacker can inject malicious code into...
PT-2025-5062
Name of the Vulnerable Software and Affected Versions NotFound CMC MIGRATE versions 0.0.0 through 0.0.3 Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This can lead to the execution of malicious...
PT-2025-4970
Name of the Vulnerable Software and Affected Versions Calendi versions n/a through 1.1.1 Description The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This means that an attacker can inject malicious scripts...
CVE-2025-23607: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Camoo Sarl CAMOO SMS camoo-sms allows Reflected XSS.This issue affects CAMOO SMS: from n/a through = 3.0.1...
CVE-2025-23580
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matthew BizLibrary bizlibrary allows Reflected XSS.This issue affects BizLibrary: from n/a through = 1.1...
CVE-2025-23461
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xkollsoftware Social2Blog social2blog allows Reflected XSS.This issue affects Social2Blog: from n/a through = 0.2.990...
CVE-2025-23551 WordPress SexBundle plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in razvypp SexBundle sexbundle allows Reflected XSS.This issue affects SexBundle: from n/a through = 1.4...
CVE-2025-22267
CVE-2025-22267 is a stored XSS in the WordPress plugin “Weaver Themes Shortcode Compatibility.” The issue arises from improper input neutralization during web page generation and affects versions from n/a up to and including 1.0.4. The vulnerability is authenticated (Contributor+) and is describe...
CVE-2025-22706
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iova.mihai Social Pug: Author Box allows Reflected XSS. This issue affects Social Pug: Author Box: from n/a through 1.0.0...
CVE-2024-49666
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reputeinfosystems ARPrice arprice allows SQL Injection.This issue affects ARPrice: from n/a through = 4.1.3...
CVE-2024-49300
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows Reflected XSS. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/a through 1.16.5...
CVE-2025-22719
CVE-2025-22719 is a Stored XSS in VikAppointments Services Booking Calendar (E4J s.r.l.) across VikAppointments versions up to 1.2.16 (no details beyond that). Public sources (Red Hat, ENISA EUVD, Patchstack) describe it as Improper Neutralization of Input During Web Page Generation (XSS) with CV...
CVE-2025-22709
CVE-2025-22709 describes a reflected cross-site scripting vulnerability affecting Verge3D (Soft8Soft) where input is improperly neutralized during web page generation. The impact is a Reflected XSS in Verge3D versions from n/a up to 4.8.0. CVSS v3.1 details show a base score of 7.1 (HIGH) with ne...