16206 matches found
CVE-2024-51624
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jajapagamentos Já-Já Pagamentos for WooCommerce wc-ja-ja-pagamentos-multicaixa-express allows Reflected XSS.This issue affects Já-Já Pagamentos for WooCommerce: from n/a through = 1.3.0...
CVE-2025-22566
CVE-2025-22566 affects the WordPress plugin ULTIMATE VIDEO GALLERY (versions
CVE-2025-22575
CVE-2025-22575 is a reported Reflected Cross-Site Scripting in the WordPress plugin SUPER RESPONSIVE SLIDER (versions ≤ 1.4). The issue arises from Imperfect neutralization of input during web page generation , enabling a reflected payload to execute in the victim’s browser. The CVSS 3.1 vector p...
CVE-2025-22566 WordPress ULTIMATE VIDEO GALLERY Plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in extendyourweb ULTIMATE VIDEO GALLERY ultimate-gallery allows Reflected XSS.This issue affects ULTIMATE VIDEO GALLERY: from n/a through = 1.4...
CVE-2025-22575 WordPress SUPER RESPONSIVE SLIDER Plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in extendyourweb SUPER RESPONSIVE SLIDER super-slider allows Reflected XSS.This issue affects SUPER RESPONSIVE SLIDER: from n/a through = 1.4...
CVE-2025-22767
CVE-2025-22767: Reflected Cross-Site Scripting in the WordPress plugin GlobalPayments WooCommerce (versions
CVE-2025-22501 WordPress Improve My City plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Improve My City Improve My City allows Reflected XSS. This issue affects Improve My City: from n/a through 1.6...
CVE-2025-22356 WordPress Stencies plugin <= 0.58 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stencies Stencies stencies allows Reflected XSS.This issue affects Stencies: from n/a through = 0.58...
CVE-2025-22360
CVE-2025-22360 is a reflected XSS in the WP Azure offload plugin (NotFound WP Azure offload) via improper input neutralization in web page generation. Affected: WP Azure offload versions up to 2.0 (no fixed version details provided in the supplied docs). CVSSv3.1 base score 7.1 (HIGH). No explici...
CVE-2025-22360 WordPress WP Azure offload plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound WP Azure offload allows Reflected XSS. This issue affects WP Azure offload: from n/a through 2.0...
CVE-2025-22360 WordPress WP Azure offload plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in promact WP Azure offload wp-azure-offload allows Reflected XSS.This issue affects WP Azure offload: from n/a through = 2.0...
CVE-2025-2864
SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate website owning the affected device, once the cookie is set. This attack only impacts the victim's browser reflected XSS...
CVE-2025-2864
CVE-2025-2864 describes a reflected Cross-Site Scripting (XSS) vulnerability in SaTECH BCU firmware 2.1.3. The issue allows an attacker to inject malicious code into a legitimate website owned by the affected device, triggered when a cookie is set. The impact is limited to the victim’s browser; n...
CVE-2025-31102
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through = 1.1.5.5...
CVE-2025-31102 WordPress Hostel plugin <= 1.1.5.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Hostel allows Reflected XSS. This issue affects Hostel: from n/a through 1.1.5.5...
CVE-2025-26874
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in memberspace MemberSpace memberspace allows Reflected XSS.This issue affects MemberSpace: from n/a through = 2.1.13...
CVE-2025-26874
CVE-2025-26874 affects WordPress: MemberSpace plugin (versions up to 2.1.13). Root cause is improper input neutralization during web page generation, enabling Reflected XSS. CVSSv3.1 base score 7.1 (HIGH); attack vector NETWORK, privileges NONE, user interaction REQUIRED, scope CHANGED. Connected...
WordPress Advanced Post Search plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Advanced Post Search versions = 1.1.0...