9212 matches found
PT-2025-54441
Name of the Vulnerable Software and Affected Versions ZhinaTwitterWidget versions through 1.0 Description The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-site Scripting XSS issue. This allows for the injection of malicious...
PT-2025-54332
Name of the Vulnerable Software and Affected Versions Plainware Locatoraid Store Locator versions through 3.9.65 Description A flaw exists in Plainware Locatoraid Store Locator that allows for Stored Cross-Site Scripting XSS. This issue arises from improper neutralization of input during web page...
WordPress plugin Content Fetcher 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-54315
Name of the Vulnerable Software and Affected Versions Neilgee Bootstrap Modals versions through 1.3.2 Description A flaw exists in Neilgee Bootstrap Modals that allows for Stored Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page generation. Successful...
PT-2025-54326
Name of the Vulnerable Software and Affected Versions Livemesh Addons for Beaver Builder versions through 3.9.2 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting XSS. This issue allows f...
PT-2025-54301
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Tadlock Series allows Stored XSS.This issue affects Series: from n/a through 2.0.1...
PT-2025-54413
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ikaes Accessibility Press allows Stored XSS.This issue affects Accessibility Press: from n/a through 1.0.2...
PT-2025-54331
Name of the Vulnerable Software and Affected Versions Soli WP Post Signature versions through 0.4.1 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, which can lead to Stored Cross-site Scripting XSS. This allows an attacker to inject...
PT-2025-54304
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP for church Sermon Manager allows Stored XSS.This issue affects Sermon Manager: from n/a through 2.30.0...
PT-2025-54306
Name of the Vulnerable Software and Affected Versions landwire Responsive Block Control versions through 1.2.9 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-Site Scripting issue. This allows for the potential...
PT-2025-54314
Name of the Vulnerable Software and Affected Versions Audiomack versions through 1.4.8 Description Audiomack is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. The issue involves the potential...
PT-2025-54440
Name of the Vulnerable Software and Affected Versions Matamko En Masse versions through 1.0 Description The software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting XSS. This allows an attacker to inject malicious...
PT-2025-54323
Name of the Vulnerable Software and Affected Versions Curator.Io versions through 1.9.5 Description A flaw exists in Curator.Io that allows for Stored Cross-site Scripting XSS. This issue involves improper neutralization of input during web page generation. The vulnerability could potentially all...
PT-2025-54319
Name of the Vulnerable Software and Affected Versions kcseopro AdWords Conversion Tracking Code versions through 1.0 Description The kcseopro AdWords Conversion Tracking Code contains a flaw related to improper neutralization of input during web page generation, leading to a Stored Cross-Site...
PT-2025-54309
Name of the Vulnerable Software and Affected Versions kalender.Digital Calendar.Online / Kalender.Digital versions through 1.0.11 Description The software contains a flaw related to improper input handling during web page generation, leading to a Cross-site Scripting XSS condition. Specifically,...
PT-2025-54313
Name of the Vulnerable Software and Affected Versions ThinkUpThemes Consulting versions through 1.5.0 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS issue. This specific instance allows for Stored...
PT-2025-54298
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThinkUpThemes Melos allows Stored XSS.This issue affects Melos: from n/a through 1.6.0...
PT-2025-54415
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Boxy Studio Cooked allows Stored XSS.This issue affects Cooked: from n/a through 1.11.2...
PT-2025-54398
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codetipi Valenti Engine allows DOM-Based XSS.This issue affects Valenti Engine: from n/a through 1.0.3...
