CVE-2025-32536 WordPress HTML5 Video Player with Playlist Plugin <= 2.50 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sandeep Verma HTML5 Video Player with Playlist allows Reflected XSS. This issue affects HTML5 Video Player with Playlist: from n/a through 2.50...

CVE-2025-32536

CVE-2025-32536 refers to a Reflected Cross-Site Scripting vulnerability in the HTML5 Video Player with Playlist WordPress plugin. The vulnerability affects the plugin version range up to 2.50 (HTML5 Video Player with Playlist). The root cause, as stated in connected documentation, is improper inp...

CVE-2025-32525

CVE-2025-32525 is a reflected XSS affecting Interactive Geo Maps plugin for WordPress (affected until 1.6.24). The CVSS v3.1 base score is 7.1 (HIGH); attack vector NETWORK, complexity LOW, privileges NONE, user interaction REQUIRED, and impact is LOW/LOW/LOW for confidentiality, integrity, avail...

CVE-2025-32524 WordPress MyWorks WooCommerce Sync for QuickBooks Online plugin <= 2.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MyWorks MyWorks WooCommerce Sync for QuickBooks Online myworks-woo-sync-for-quickbooks-online allows Reflected XSS.This issue affects MyWorks WooCommerce Sync for QuickBooks Online: from n/a throug...

CVE-2025-32525 WordPress Interactive Geo Maps plugin <= 1.6.24 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MapGeo Interactive Geo Maps interactive-geo-maps allows Reflected XSS.This issue affects Interactive Geo Maps: from n/a through = 1.6.24...

CVE-2025-32525 WordPress Interactive Geo Maps plugin <= 1.6.24 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MapGeo Interactive Geo Maps interactive-geo-maps allows Reflected XSS.This issue affects Interactive Geo Maps: from n/a through = 1.6.24...

CVE-2025-32523

CVE-2025-32523 is a reflected Cross-Site Scripting vulnerability in the WooCommerce – Payphone Gateway plugin for WordPress. Affected: plugins in the WooCommerce – Payphone Gateway line from unknown (n/a) up to version 3.2.0 . Base score 7.1 (CVSS 3.1, HIGH). Exploitation details/impact are descr...

CVE-2025-32517 WordPress MultiMailer plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SCAND MultiMailer allows Reflected XSS. This issue affects MultiMailer: from n/a through 1.0.3...

CVE-2025-32517

CVE-2025-32517 is a Reflected Cross-Site Scripting (XSS) in the SCAND MultiMailer WordPress plugin. Affected versions are up to 1.0.3 (per initial details). CVSS v3.1 metrics show a base score of 7.1 (HIGH), with AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L. The Connected documents indicate the vulnerabil...

CVE-2025-31379 WordPress Insert HTML Here plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in programphases Insert HTML Here allows Reflected XSS. This issue affects Insert HTML Here: from n/a through 1.0...

CVE-2025-31378

CVE-2025-31378 is a Reflected XSS in the Oppso Unit Converter WordPress plugin. Affected software: Oppso Unit Converter

CVE-2025-31021

CVE-2025-31021: Reflected XSS in Mobile Smart (Dolby_uk Mobile Smart) due to improper input neutralization during web page generation. Affected: Mobile Smart, versions up to v1.3.16; impact per CVSSv3.1: HIGH (7.1) with network attack vector and user interaction required. Connected docs indicate ...

PT-2025-16082 · Unknown · Twispay Credit Card Payments

Name of the Vulnerable Software and Affected Versions: Twispay Credit Card Payments versions 2.1.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This means that an attacker can...

PT-2025-16080 · Unknown · Miunosoft Task Scheduler

Name of the Vulnerable Software and Affected Versions: miunosoft Task Scheduler versions 1.6.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This enables potential attackers to...

PT-2025-16046 · Unknown · Oppso Unit Converter

Name of the Vulnerable Software and Affected Versions: Oppso Unit Converter versions n/a through 1.1.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This enables attackers to inject malicious...

PT-2025-16060 · Unknown · Sandeep Verma Html5 Video Player With Playlist

Name of the Vulnerable Software and Affected Versions: Sandeep Verma HTML5 Video Player with Playlist versions 2.50 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This enables...

phpIPAM 1.6 - Reflected Cross Site Scripting (XSS)

Exploit Title: phpIPAM 1.6 - Reflected Cross Site Scripting XSS Date: 2024-10-26 Exploit Author: CodeSecLab Vendor Homepage: https://github.com/phpipam/phpipam Software Link: https://github.com/phpipam/phpipam Version: 1.5.1 Tested on: Ubuntu Windows CVE : CVE-2023-24657 PoC:...

PT-2025-16054 · Scand · Scand Multimailer

Name of the Vulnerable Software and Affected Versions: SCAND MultiMailer versions 1.0.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This enables attackers to inject malicious...

CVE-2025-27350 WordPress Vice Versa plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hugh Mungus Vice Versa vice-versa allows Reflected XSS.This issue affects Vice Versa: from n/a through = 2.2.3...

CVE-2025-32114 WordPress 5sterrenspecialist plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 5sterrenspecialist WordPress 5sterrenspecialist Plugin 5-sterrenspecialist allows Reflected XSS.This issue affects WordPress 5sterrenspecialist Plugin: from n/a through = 1.4...