CVE-2025-31899

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpshopee Awesome Logos awesome-logos allows Reflected XSS.This issue affects Awesome Logos: from n/a through = 1.2...

CVE-2025-31901

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digihood Digihood HTML Sitemap wedesin-html-sitemap allows Reflected XSS.This issue affects Digihood HTML Sitemap: from n/a through = 3.1.1...

CVE-2025-31907

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Labib Ahmed Team Builder team-display allows Reflected XSS.This issue affects Team Builder: from n/a through = 1.3...

CVE-2025-31902

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Reflected XSS.This issue affects Social Share And Social Locker: from n/a through = 1.4.1...

CVE-2025-31898

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dustinscarberry MediaView mediaview allows Reflected XSS.This issue affects MediaView: from n/a through = 1.1.2...

CVE-2025-31626

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in M. Ali Saleem Support Helpdesk Ticket System Lite ticket-help-desk-system-lite allows Reflected XSS.This issue affects Support Helpdesk Ticket System Lite: from n/a through = 4.5.2...

CVE-2025-31536

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in moshensky CF7 Spreadsheets cf7-spreadsheets allows Reflected XSS.This issue affects CF7 Spreadsheets: from n/a through = 2.3.2...

CVE-2025-31467

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in miro.mannino Flickr Photostream flickr-photostream allows Reflected XSS.This issue affects Flickr Photostream: from n/a through = 3.1.8...

CVE-2025-31442

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e1tekoap42 Search engine keywords highlighter keywords-highlight-tool allows Reflected XSS.This issue affects Search engine keywords highlighter: from n/a through = 0.1.3...

CVE-2025-31468

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in scottsm WPIdenticon wp-identicon allows Reflected XSS.This issue affects WPIdenticon: from n/a through = 2.0...

BIT-JOOMLA-2022-27914 [20221101] - Core - RXSS through reflection of user input in com_media

An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in commedia...

BIT-JOOMLA-2022-27913 [20221002] - Core - RXSS through reflection of user input in headings

An issue was discovered in Joomla! 4.2.0 through 4.2.3. Inadequate filtering of potentially malicious user input leads to reflected XSS vulnerabilities in various components...

CVE-2025-31905

CVE-2025-31905 is a Reflected XSS in the WordPress plugin Team Rosters (NotFound) affecting versions up to and including 4.7 . The issue is caused by improper input neutralization during web page generation. Exploitation status or exact payloads are not detailed in the provided documents. No reme...

CVE-2025-31907

CVE-2025-31907 affects the Team Builder (Meet the Team) WordPress plugin up to version 1.3. It is a Reflected Cross‑Site Scripting vulnerability caused by improper input neutralization during web page generation. Reported CVSS v3.1 vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L with base score 7.1 (...

CVE-2025-31903 WordPress XV Random Quotes plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xavi Ivars XV Random Quotes xv-random-quotes allows Reflected XSS.This issue affects XV Random Quotes: from n/a through = 2.0.0...

CVE-2025-31905 WordPress Team Rosters Plugin <= 4.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark O'Donnell Team Rosters team-rosters allows Reflected XSS.This issue affects Team Rosters: from n/a through = 4.7...

CVE-2025-31902

CVE-2025-31902 affects the WordPress plugin Social Share And Social Locker (NotFound) and is classified as a Reflected XSS caused by improper neutralization of input during web page generation. The advisory lists the affected range as “from n/a through 1.4.1.” The connected documents do not provi...

CVE-2025-31901 WordPress Digihood HTML Sitemap Plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Digihood Digihood HTML Sitemap wedesin-html-sitemap allows Reflected XSS.This issue affects Digihood HTML Sitemap: from n/a through = 3.1.1...

CVE-2025-31901

CVE-2025-31901 concerns the Digihood HTML Sitemap WordPress plugin. The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by improper input neutralization during web page generation, affecting Digihood HTML Sitemap versions up to 3.1.1 (as stated). The impact is typical for Reflected...

CVE-2025-31899

CVE-2025-31899 describes a Reflected XSS in the WordPress plugin Awesome Logos (affected: up to version 1.2). The issue arises from improper neutralization of input during web page generation. CVSS 3.1 base score 7.1 ( HIGH ), with Network attack vector, requiring user interaction. Affected versi...