CVE-2025-22747

CVE-2025-22747 is a Stored XSS vulnerability in the Foundation Columns plugin for WordPress (Foundation Columns: from n/a through 0.8). The issue is caused by improper neutralization of input during web page generation. Connected sources indicate this CVE has not been patched yet (patch status: U...

CVE-2025-22765

CVE-2025-22765 is a Reflected XSS in the WP Order By WordPress plugin, affecting versions up to 1.4.2. The CVSS v3.1 base score is 7.1 (HIGH). The description notes a fix in 1.4.2; no exploitation status is provided in the available documents.

CVE-2025-22776

CVE-2025-22776 — Reflected XSS in the WordPress plugin WP Bulletin Board due to improper input neutralization during web page generation. Affected: WP Bulletin Board

CVE-2024-35280

A improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Fortinet FortiDeceptor 5.3.0, FortiDeceptor 5.2.0, FortiDeceptor 5.1 all versions, FortiDeceptor 5.0 all versions, FortiDeceptor 4.3 all versions, FortiDeceptor 4.2 all versions, FortiDeceptor 4....

CVE-2025-22797: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oğulcan Özügenç Gallery and Lightbox gallery-and-lightbox allows Stored XSS.This issue affects Gallery and Lightbox: from n/a through = 1.0.14...

PT-2025-4432

Name of the Vulnerable Software and Affected Versions Photo Gallery – Image Gallery by Ape versions prior to 2.2.8 Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject...

WordPress plugin Bold Pagos En Línea has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-22788: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Codexpert, Inc CoDesigner woolementor allows Stored XSS.This issue affects CoDesigner: from n/a through = 4.29...

CVE-2025-22769: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Creative Brahma Multifox allows Stored XSS.This issue affects Multifox: from n/a through 1.3.7...

CVE-2025-22765: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weiluri WP Order By wp-order-by allows Reflected XSS.This issue affects WP Order By: from n/a through = 1.4.2...

CVE-2025-22764: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vipul Jariwala WP Post Corrector wp-post-corrector allows Reflected XSS.This issue affects WP Post Corrector: from n/a through = 1.0.2...

CVE-2025-22761: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Olaf Lederer Ajax Contact Form fws-ajax-contact-form allows Stored XSS.This issue affects Ajax Contact Form: from n/a through = 1.4.1...

CVE-2025-22755: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bavington WP Headmaster wp-headmaster allows Reflected XSS.This issue affects WP Headmaster: from n/a through = 0.3...

CVE-2025-22724: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MojofyWP Product Carousel For WooCommerce – WoorouSell allows Stored XSS.This issue affects Product Carousel For WooCommerce – WoorouSell: from n/a through 1.1.0...

CVE-2025-22750: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Patel Post Carousel & Slider post-types-carousel-slider allows Reflected XSS.This issue affects Post Carousel & Slider: from n/a through = 1.0.4...

PT-2025-4665

Name of the Vulnerable Software and Affected Versions S-DEV SEO versions 1.88 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS attacks. Recommendations For S-DEV SEO versio...

PT-2025-4671

Name of the Vulnerable Software and Affected Versions Tarak Patel Post Carousel & Slider versions 1.0.0 through 1.0.4 Description The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This means that an attacker c...

PT-2025-4678

Name of the Vulnerable Software and Affected Versions Elementor AI Addons versions prior to 2.2.2 Description The issue is related to improper neutralization of input during web page generation, allowing DOM-Based XSS. This enables potential attackers to execute malicious scripts in the context o...

PT-2025-4702

Name of the Vulnerable Software and Affected Versions CoDesigner WooCommerce Builder for Elementor versions 4.7.17.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means an attacker ca...

PT-2025-4686

Name of the Vulnerable Software and Affected Versions Zarinpal Paid Download versions n/a through 2.3 Description The issue affects Masoud Amini Zarinpal Paid Download, allowing Reflected XSS due to improper neutralization of input during web page generation. This enables attackers to inject...