PT-2025-54323

Name of the Vulnerable Software and Affected Versions Curator.Io versions through 1.9.5 Description A flaw exists in Curator.Io that allows for Stored Cross-site Scripting XSS. This issue involves improper neutralization of input during web page generation. The vulnerability could potentially all...

PT-2025-54440

Name of the Vulnerable Software and Affected Versions Matamko En Masse versions through 1.0 Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting XSS. This allows an attacker to inject malicious...

PT-2025-54319

Name of the Vulnerable Software and Affected Versions kcseopro AdWords Conversion Tracking Code versions through 1.0 Description The kcseopro AdWords Conversion Tracking Code contains a flaw related to improper neutralization of input during web page generation, leading to a Stored Cross-Site...

PT-2025-54298

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThinkUpThemes Melos allows Stored XSS.This issue affects Melos: from n/a through 1.6.0...

PT-2025-54309

Name of the Vulnerable Software and Affected Versions kalender.Digital Calendar.Online / Kalender.Digital versions through 1.0.11 Description The software contains a flaw related to improper input handling during web page generation, leading to a Cross-site Scripting XSS condition. Specifically,...

PT-2025-54398

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codetipi Valenti Engine allows DOM-Based XSS.This issue affects Valenti Engine: from n/a through 1.0.3...

PT-2025-54415

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Boxy Studio Cooked allows Stored XSS.This issue affects Cooked: from n/a through 1.11.2...

PT-2025-54313

Name of the Vulnerable Software and Affected Versions ThinkUpThemes Consulting versions through 1.5.0 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS issue. This specific instance allows for Stored...

CVE-2025-55062

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2025-55064

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2025-55063

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2025-66103

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revmakx WPCal.io wpcal allows DOM-Based XSS.This issue affects WPCal.io: from n/a through = 0.9.5.9...

EUVD-2025-205806

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Revmakx WPCal.Io allows DOM-Based XSS.This issue affects WPCal.Io: from n/a through 0.9.5.9...

CVE-2025-63027

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webcreations907 WBC907 Core wbc907-core allows Stored XSS.This issue affects WBC907 Core: from n/a through = 3.4.1...

EUVD-2025-205725

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FlippingBook FlippingBook flippingbook allows DOM-Based XSS.This issue affects FlippingBook: from n/a through = 2.0.1...

EUVD-2025-205709

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vidish Combo Offers WooCommerce woo-combo-offers allows DOM-Based XSS.This issue affects Combo Offers WooCommerce: from n/a through = 4.2...

EUVD-2025-205708

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in autolistings Auto Listings auto-listings allows Stored XSS.This issue affects Auto Listings: from n/a through = 2.7.1...

EUVD-2025-205737

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atte Moisio AM Events am-events allows Stored XSS.This issue affects AM Events: from n/a through = 1.13.1...

EUVD-2025-205758

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Portfolio Addon designthemes-portfolio-addon allows DOM-Based XSS.This issue affects DesignThemes Portfolio Addon: from n/a through = 1.5...

CVE-2025-69092

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows DOM-Based XSS.This issue affects Essential Addons for Elementor: from n/a through = 6.5.3...