CVE-2025-30548

CVE-2025-30548 is a Reflected XSS in the WordPress plugin Advanced Post Search. The vulnerability affects Advanced Post Search versions from n/a through 1.1.0 and, per the provided documents, remains Unpatched (no fix/version is indicated). The issue targets input during Web Page Generation and c...

CVE-2025-30563

CVE-2025-30563 is a Reflected XSS in the Tidekey WordPress plugin. The connected Wordfence document confirms Tidekey is affected up to version 1.1 (and from n/a through 1.1 per the entry). The initial record lists a CVSS v3.1 base score of 7.1 (HIGH) with network attack vector and user interactio...

CVE-2025-30544 WordPress OK Poster Group plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in svmidi OK Poster Group ok-poster-group allows Reflected XSS.This issue affects OK Poster Group: from n/a through = 1.1...

CVE-2025-30544 WordPress OK Poster Group plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound OK Poster Group allows Reflected XSS. This issue affects OK Poster Group: from n/a through 1.1...

CVE-2025-30520

CVE-2025-30520 affects Breezing Forms (WordPress) up to version 1.2.8.11, with a Reflected XSS due to improper input neutralization during page generation. Affected range is Breezing Forms: from n/a through 1.2.8.11. According to the connected data, the entry is not yet patched (Patch Status: Unp...

CVE-2025-30520 WordPress Breezing Forms plugin <= 1.2.8.11 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crosstec Breezing Forms breezing-forms allows Reflected XSS.This issue affects Breezing Forms: from n/a through = 1.2.8.11...

CVE-2025-30520 WordPress Breezing Forms plugin <= 1.2.8.11 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crosstec Breezing Forms allows Reflected XSS. This issue affects Breezing Forms: from n/a through 1.2.8.11...

PT-2025-14430 · Wiredminds · Leadlab

Name of the Vulnerable Software and Affected Versions: LeadLab by wiredminds versions n/a through 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attacker can inject...

WordPress plugin About Author 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-30006

CVE-2025-30006 describes a reflected cross-site scripting (XSS) vulnerability in the admin control panel of Xorcom CompletePBX . The issue affects all CompletePBX versions up to and including 5.2.35. The vulnerability arises in the administrative interface and is exploitable under the CVSS 3.1 me...

CVE-2025-30006 Xorcom CompletePBX <= 5.2.35 Reflected Cross-Site Scripting

Xorcom CompletePBX is vulnerable to a reflected cross-site scripting XSS in the administrative control panel. This issue affects CompletePBX: all versions up to and prior to 5.2.35...

CVE-2025-30006 Xorcom CompletePBX <= 5.2.35 Reflected Cross-Site Scripting

Xorcom CompletePBX is vulnerable to a reflected cross-site scripting XSS in the administrative control panel. This issue affects CompletePBX: all versions up to and prior to 5.2.35...

CVE-2025-30149 OpenEMR Reflected XSS in AJAX Script

OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting XSS in the AJAX Script interface\super\layoutlistitemsajax.php via the target parameter. This vulnerability is fixed in 7.0.3...

CVE-2025-30149 OpenEMR Reflected XSS in AJAX Script

OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting XSS in the AJAX Script interface\super\layoutlistitemsajax.php via the target parameter. This vulnerability is fixed in 7.0.3...

CVE-2025-30149

CVE-2025-30149 concerns OpenEMR, a free/open source EHR/PM app. It describes a reflected XSS in the AJAX Script interface, specifically in layout_listitems_ajax.php accessed via the target parameter. The vulnerability’s root cause is input reflected back to the user, enabling script injection. Ac...

CVE-2025-29772

CVE-2025-29772 describes a reflected XSS vulnerability in OpenEMR, specifically involving the POST parameter hidden_subcategory that is echoed to CAMOS/new.php without proper sanitization. This affects OpenEMR prior to version 7.0.3 (fixed in 7.0.3). The vulnerability could allow an attacker to i...

CVE-2025-29772 OpenEMR allows Reflected XSS in CAMOS new.php

OpenEMR is a free and open source electronic health records and medical practice management application. The POST parameter hiddensubcategory is output to the page without being properly processed. This leads to a reflected cross-site scripting XSS vul;nerability in CAMOS new.php. This...

PT-2025-13688 · Unknown · Tantyyellow

Name of the Vulnerable Software and Affected Versions: Tantyyellow versions 1.0.0.0 through 1.0.0.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

CVE-2024-55093

phpIPAM 1.7.3 has a reflected XSS vulnerability in the install scripts. The provided documents do not include exploitation details or a remediation/version fix.

PT-2025-13796 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.3 Description: The issue concerns reflected cross-site scripting XSS in the AJAX Script interface, specifically in the layout listitems ajax.php file via the target parameter. This allows for potential XSS attack...