CVE-2025-23725 WordPress Accessibility Task Manager plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pshikli Accessibility Task Manager accessibility-task-manager allows Reflected XSS.This issue affects Accessibility Task Manager: from n/a through = 1.2.1...

CVE-2025-23636 WordPress My Favorite Car plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dimitar A. My Favorite Car my-favorite-cars allows Reflected XSS.This issue affects My Favorite Car: from n/a through = 1.0...

CVE-2025-23727 WordPress AZ Content Finder plugin <= 0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in antonzaroutski AZ Content Finder az-content-finder allows Reflected XSS.This issue affects AZ Content Finder: from n/a through = 0.1...

CVE-2025-23636

CVE-2025-23636 is a reflected XSS vulnerability reported for the WordPress plugin “My Favorite Car” by Dimitar Atanasov. The description states an improper neutralization of input during web page generation, enabling reflected Cross-Site Scripting. Affected range is “My Favorite Car: from n/a thr...

CVE-2025-23725

CVE-2025-23725 : An XSS flaw in Accessibility Task Manager, described as "Improper Neutralization of Input During Web Page Generation (XSS)". The Red Hat and NVD entries confirm a Reflected XSS affecting Accessibility Task Manager versions up to 1.2.1 (exact affected range shown as from n/a throu...

CVE-2025-23724

CVE-2025-23724 describes a Reflected XSS in the University Quizzes Online plugin. Public sources (NVD/Red Hat) attribute the issue to improper neutralization of user input during web page generation, enabling reflected cross-site scripting. Affected software: University Quizzes Online plugin vers...

CVE-2025-23636 WordPress My Favorite Car plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dimitar A. My Favorite Car my-favorite-cars allows Reflected XSS.This issue affects My Favorite Car: from n/a through = 1.0...

CVE-2025-23729 WordPress XTRA Settings plugin <= 2.1.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fures XTRA Settings xtra-settings allows Reflected XSS.This issue affects XTRA Settings: from n/a through = 2.1.8...

CVE-2025-23724 WordPress University Quizzes Online plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in oleksandr87 University Quizzes Online university-quizzes-online allows Reflected XSS.This issue affects University Quizzes Online: from n/a through = 1.4...

CVE-2025-23626 WordPress Kumihimo plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fukushima Kumihimo kumihimo allows Reflected XSS.This issue affects Kumihimo: from n/a through = 1.0.2...

CVE-2025-23545 WordPress WP Social Broadcast plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Navnish Bhardwaj WP Social Broadcast wp-social-broadcast allows Reflected XSS.This issue affects WP Social Broadcast: from n/a through = 1.0.0...

CVE-2025-22264

CVE-2025-22264 : Reflected XSS in WP Query Creator (WordPress) attributed to Tarak Patel WP Query Creator. According to Red Hat’s entry, the vulnerability is caused by improper neutralization of input during web page generation, enabling reflected cross-site scripting. Affected: WP Query Creator ...

CVE-2025-23540 WordPress WP Front-end login and register plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mohsin Khan WP Front-end login and register wp-front-end-login-and-register allows Reflected XSS.This issue affects WP Front-end login and register: from n/a through = 2.1.0...

CVE-2024-13422

CVE-2024-13422 pertains to the SEO Blogger to WordPress Migration using 301 Redirection plugin for WordPress. The vulnerability is a Reflected Cross-Site Scripting flaw via the url parameter in all versions up to and including 0.4.8. It allows unauthenticated attackers to inject arbitrary scripts...

CVE-2024-13422 SEO Blogger to WordPress Migration using 301 Redirection <= 0.4.8 - Reflected Cross-Site Scripting

The SEO Blogger to WordPress Migration using 301 Redirection plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'url' parameter in all versions up to, and including, 0.4.8 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2025-4930 · Mohsin Khan · Wp Front-End Login/Register

Name of the Vulnerable Software and Affected Versions: Mohsin khan WP Front-end login and register versions prior to 2.1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This problem affects th...

PT-2025-3426 · Unknown · Online Pizza Delivery System

Name of the Vulnerable Software and Affected Versions: Online Pizza Delivery System version 1.0 Description: A Reflected Cross-Site Scripting XSS vulnerability exists in the search.php file of the Online Pizza Delivery System. The vulnerability allows an attacker to execute arbitrary JavaScript...

CVE-2024-57326

The CVE-2024-57326 vulnerability affects Online Pizza Delivery System 1.0. It is a reflected XSS in the search.php endpoint that allows arbitrary JavaScript via unsanitized input in the search parameter, with CVSS v3.1 base score 6.1 (Network, Low attack complexity, No privileges, User interactio...

CVE-2024-57326

A Reflected Cross-Site Scripting XSS vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter...

CVE-2024-57326

A Reflected Cross-Site Scripting XSS vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter...