CVE-2025-23941: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in meinturnierplan MeinTurnierplan.de Widget Viewer meinturnierplande-widget-viewer allows Stored XSS.This issue affects MeinTurnierplan.de Widget Viewer: from n/a through = 1.1...

CVE-2025-23965: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kopatheme Kopa Nictitate Toolkit kopa-nictitate-toolkit allows Stored XSS.This issue affects Kopa Nictitate Toolkit: from n/a through = 1.0.2...

CVE-2025-23940: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in horiyuki Image Switcher image-switcher allows Stored XSS.This issue affects Image Switcher: from n/a through = 0.1.1...

CVE-2025-23830: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jobair JB Horizontal Scroller News Ticker jb-horizontal-scroller-news-ticker allows DOM-Based XSS.This issue affects JB Horizontal Scroller News Ticker: from n/a through = 1.0...

CVE-2025-23807: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jim2212001 Spiderpowa Embed PDF spiderpowa-embed-pdf allows Stored XSS.This issue affects Spiderpowa Embed PDF: from n/a through = 1.0...

CVE-2025-23434: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in viher3 Easy EU Cookie law easy-eu-cookie-law allows Stored XSS.This issue affects Easy EU Cookie law: from n/a through = 1.3.3.1...

PT-2025-5212

Name of the Vulnerable Software and Affected Versions WpF Ultimate Carousel versions 1.0.11 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicio...

PT-2025-5221

Name of the Vulnerable Software and Affected Versions arul PDF.js Shortcode versions n/a through 1.0 Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...

PT-2025-5204

Name of the Vulnerable Software and Affected Versions Feedburner Optin Form versions 0.2.8 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject maliciou...

PT-2025-4874

Name of the Vulnerable Software and Affected Versions Altima Lookbook Free for WooCommerce versions 1.1.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This means that an attacker c...

PT-2025-5124

Name of the Vulnerable Software and Affected Versions Stop Comment Spam versions 0.5.3 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS. Recommendations For versions 0.5.3...

PT-2025-4934

Name of the Vulnerable Software and Affected Versions LH Login Page versions prior to 2.14 Description The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This means that an attacker can inject malicious scripts...

PT-2025-4978

Name of the Vulnerable Software and Affected Versions Captchelfie – Captcha by Selfie versions 1.0.7 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This means an attacker can inject...

PT-2025-5217

Name of the Vulnerable Software and Affected Versions Saiem Khan Image Switcher versions 1.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means an attacker can inject malicious scrip...

PT-2025-5114

Name of the Vulnerable Software and Affected Versions Metaphor Widgets versions n/a through 2.4 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacker can inject...

PT-2025-5137

Name of the Vulnerable Software and Affected Versions Nikos M. Top Flash Embed versions 0.3.4 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

PT-2025-5126

Name of the Vulnerable Software and Affected Versions WordPress Data Guard versions prior to 8 Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicious script...

PT-2025-5130

Name of the Vulnerable Software and Affected Versions RaminMT Links/Problem Reporter versions n/a through 2.6.0 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject...

PT-2025-5146

Name of the Vulnerable Software and Affected Versions Charity-thermometer versions 1.1.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

PT-2025-5151

Name of the Vulnerable Software and Affected Versions Pressfore Winning Portfolio versions n/a through 1.1 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Stored XSS. This problem enables attackers...