PT-2025-14401 · Unknown · Podpirate Access Areas

Name of the Vulnerable Software and Affected Versions: podpirate Access Areas versions n/a through 1.5.19 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential...

CVE-2025-29772 OpenEMR allows Reflected XSS in CAMOS new.php

OpenEMR is a free and open source electronic health records and medical practice management application. The POST parameter hiddensubcategory is output to the page without being properly processed. This leads to a reflected cross-site scripting XSS vul;nerability in CAMOS new.php. This...

CVE-2025-29772 OpenEMR allows Reflected XSS in CAMOS new.php

OpenEMR is a free and open source electronic health records and medical practice management application. The POST parameter hiddensubcategory is output to the page without being properly processed. This leads to a reflected cross-site scripting XSS vul;nerability in CAMOS new.php. This...

CVE-2025-23995

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ta2g Tantyyellow allows Reflected XSS.This issue affects Tantyyellow: from n/a through 1.0.0.5...

CVE-2025-23995

CVE-2025-23995 affects the WordPress Tantyyellow theme (versions up to 1.0.0.5). Connected sources confirm an Improper Neutralization of Input During Web Page Generation (Reflected XSS) vulnerability in Tantyyellow, with CVSS v3.1 base score 7.1 (HIGH). Publicly noted affected range includes 1.0....

CVE-2025-23995 WordPress Tantyyellow theme <= 1.0.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ta2g Tantyyellow allows Reflected XSS.This issue affects Tantyyellow: from n/a through 1.0.0.5...

CVE-2024-55093

phpIPAM through 1.7.3 has a reflected Cross-Site Scripting XSS vulnerability in the install scripts...

CVE-2025-22356

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stencies Stencies stencies allows Reflected XSS.This issue affects Stencies: from n/a through = 0.58...

CVE-2025-22501

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Improve My City Improve My City improve-my-city allows Reflected XSS.This issue affects Improve My City: from n/a through = 1.6...

CVE-2025-22575

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in extendyourweb SUPER RESPONSIVE SLIDER super-slider allows Reflected XSS.This issue affects SUPER RESPONSIVE SLIDER: from n/a through = 1.4...

CVE-2025-22566

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in extendyourweb ULTIMATE VIDEO GALLERY ultimate-gallery allows Reflected XSS.This issue affects ULTIMATE VIDEO GALLERY: from n/a through = 1.4...

CVE-2025-22360

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in promact WP Azure offload wp-azure-offload allows Reflected XSS.This issue affects WP Azure offload: from n/a through = 2.0...

CVE-2024-51624

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jajapagamentos Já-Já Pagamentos for WooCommerce wc-ja-ja-pagamentos-multicaixa-express allows Reflected XSS.This issue affects Já-Já Pagamentos for WooCommerce: from n/a through = 1.3.0...

CVE-2025-31102

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through = 1.1.5.5...

CVE-2025-26874

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in memberspace MemberSpace memberspace allows Reflected XSS.This issue affects MemberSpace: from n/a through = 2.1.13...

CVE-2025-25100

Cross-Site Request Forgery CSRF vulnerability in victoracano Cazamba cazamba allows Reflected XSS.This issue affects Cazamba: from n/a through = 1.2...

CVE-2025-25086

Cross-Site Request Forgery CSRF vulnerability in WPDeveloper Secret Meta facebook-secret-meta allows Reflected XSS.This issue affects Secret Meta: from n/a through = 1.2.1...

CVE-2025-25134

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zenverse Theme Demo Bar wordpress-theme-demo-bar allows Reflected XSS.This issue affects Theme Demo Bar: from n/a through = 1.6.3...

CVE-2025-23638

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Umesh Ghimire Frontend Post Submission frontend-post-submission allows Reflected XSS.This issue affects Frontend Post Submission: from n/a through = 1.0...

CVE-2025-23728

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in atelierhyper AuMenu aumenu allows Reflected XSS.This issue affects AuMenu: from n/a through = 1.1.5...