9212 matches found
CVE-2025-66090 WordPress SKT Skill Bar plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows DOM-Based XSS.This issue affects SKT Skill Bar: from n/a through = 2.5...
EUVD-2025-198466
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through = 20250327...
PT-2025-47750
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through = 20250327...
PT-2025-47759
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows DOM-Based XSS.This issue affects Stylish Cost Calculator: from n/a through = 8.1.5...
PT-2025-47733
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in boldthemes Bold Page Builder bold-page-builder allows DOM-Based XSS.This issue affects Bold Page Builder: from n/a through = 5.5.2...
PT-2025-47761
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows DOM-Based XSS.This issue affects Extensions for Leaflet Map: from n/a through = 4.8...
PT-2025-47758
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows DOM-Based XSS.This issue affects SKT Skill Bar: from n/a through = 2.5...
PT-2025-47741
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EnvoThemes Envo Extra envo-extra allows Stored XSS.This issue affects Envo Extra: from n/a through = 1.9.11...
CVE-2025-0643
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS. This issue affects Pyxis Signage: through 31012025...
PT-2025-47572
Name of the Vulnerable Software and Affected Versions Pyxis Signage versions through 31012025 Description Pyxis Signage contains a flaw related to improper input handling during web page generation, potentially leading to Stored Cross-site Scripting XSS. This allows for the injection of malicious...
Saysis Starcities 跨站脚本漏洞
Saysis Starcities is an application from the Turkish company Saysis. A cross-site scripting vulnerability exists in Saysis Starcities versions prior to 1.1.61, which stems from improper input neutralization during web page generation and could lead to a reflective cross-site scripting attack...
CVE-2025-55059
CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
CVE-2025-55056
Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
EUVD-2025-197846
CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
CVE-2025-55056
Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
CVE-2025-55059
CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
CVE-2025-55059
CVE-2025-55059 is described across sources as a CWE-79 XSS due to improper input neutralization during web page generation. Connected documents provide concrete detail for Maxum Rumpus FTP Server, noting a vulnerability in version 9.0.12 (XSS via unneutralized input). Other entries (Red Hat, ENIS...
CVE-2025-55059
CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...