MAL-2025-18730 Malicious code in draco-parallax-mineralogy-quantum (npm)

The package draco-parallax-mineralogy-quantum was found to contain malicious code...

MAL-2025-33994 Malicious code in stop-galaxy-commitlint-config-angular-parallax (npm)

The package stop-galaxy-commitlint-config-angular-parallax was found to contain malicious code...

MAL-2025-32034 Malicious code in rehype-parallax-superflare-resonance (npm)

The package rehype-parallax-superflare-resonance was found to contain malicious code...

MAL-2025-33726 Malicious code in spectron-webdriver-cross-env-galaxy-parallax (npm)

The package spectron-webdriver-cross-env-galaxy-parallax was found to contain malicious code...

MAL-2025-15694 Malicious code in biogeochemistry-sync-sedna-parallax (npm)

The package biogeochemistry-sync-sedna-parallax was found to contain malicious code...

MAL-2025-16321 Malicious code in build-airbnb-parallax-pegasus (npm)

The package build-airbnb-parallax-pegasus was found to contain malicious code...

CVE-2024-9898

The Parallax Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's dd-parallax shortcode in all versions up to, and including, 1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-11224

The Parallax Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘position’ parameter in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...

CVE-2023-47854

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Howard Ehrenberg Parallax Image allows Stored XSS.This issue affects Parallax Image: from n/a through 1.7.1...

CVE-2025-30599

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wp-maverick WP Parallax Content Slider wp-parallax-content-slider allows Stored XSS.This issue affects WP Parallax Content Slider: from n/a through = 0.9.8...

CVE-2025-30599

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wp-maverick WP Parallax Content Slider wp-parallax-content-slider allows Stored XSS.This issue affects WP Parallax Content Slider: from n/a through = 0.9.8...

CVE-2025-30599 WordPress WP Parallax Content Slider plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wp-maverick WP Parallax Content Slider wp-parallax-content-slider allows Stored XSS.This issue affects WP Parallax Content Slider: from n/a through = 0.9.8...

CVE-2025-30599

CVE-2025-30599 is a stored XSS in the WordPress plugin WP Parallax Content Slider (versions up to 0.9.8). Root cause: improper input neutralization during web page generation. Public details indicate a stored cross-site scripting risk that can affect users via the plugin’s output; no specific exp...

WordPress WP Parallax Content Slider plugin <= 0.9.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin WP Parallax Content Slider versions = 0.9.8...

WordPress plugin WP Parallax Content Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

CVE-2025-30599: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wp-maverick WP Parallax Content Slider wp-parallax-content-slider allows Stored XSS.This issue affects WP Parallax Content Slider: from n/a through = 0.9.8...

PT-2025-12638

Name of the Vulnerable Software and Affected Versions WP Parallax Content Slider versions 0.9.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

CVE-2025-1664

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Parallax slider in all versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2025-10438

Name of the Vulnerable Software and Affected Versions The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress versions up to, and including, 5.3.1 Description The issue is related to Stored Cross-Site Scripting via the Parallax slider due to insufficient...

CVE-2025-1664: Improper Neutralization of Input During Web Page Generation

The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Parallax slider in all versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping. This makes it possible for...