CVE-2025-26987

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Reflected XSS.This issue affects Frontend Admin by DynamiApps: from n/a through = 3.25.17...

CVE-2025-26981

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in accessiBe Web Accessibility By accessiBe accessibe allows Reflected XSS.This issue affects Web Accessibility By accessiBe: from n/a through = 2.5...

CVE-2025-26751

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fahad Mahmood Alphabetic Pagination alphabetic-pagination allows Reflected XSS.This issue affects Alphabetic Pagination: from n/a through = 3.2.1...

CVE-2025-26868

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fastflow Fast Flow fast-flow-dashboard allows Reflected XSS.This issue affects Fast Flow: from n/a through = 1.2.16...

CVE-2025-26981

CVE-2025-26981 is a reflected XSS vulnerability in Web Accessibility By accessiBe (

CVE-2025-26993

CVE-2025-26993 corresponds to the Atarim Visual Website Collaboration plugin for WordPress. It is a Reflected Cross-Site Scripting (XSS) vulnerability in input handling during web page generation, affecting Atarim builds from n/a up to and including 4.1.0. Connected sources indicate this CVE has ...

CVE-2025-26991 WordPress WPPizza plugin <= 3.19.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ollybach WPPizza wppizza allows Reflected XSS.This issue affects WPPizza: from n/a through = 3.19.4...

CVE-2025-26993 WordPress Visual Website Collaboration Atarim plugin <= 4.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Reflected XSS.This issue affects Atarim: from n/a through = 4.1.0...

CVE-2025-26991

CVE-2025-26991 is active and affects the WordPress plugin WPPizza prior to/including version 3.19.4, with a Reflected XSS vulnerability caused by improper input neutralization during web page generation. The CVSSv3.1 base score is 7.1 (HIGH) , indicating network access with user interaction requi...

CVE-2025-26993 WordPress Visual Website Collaboration Atarim plugin <= 4.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Reflected XSS.This issue affects Atarim: from n/a through = 4.1.0...

CVE-2025-26751

CVE-2025-26751 : WordPress Alphabetic Pagination plugin vulnerable to Reflected XSS due to improper input neutralization during web page generation. Affected: Alphabetic Pagination versions up to 3.2.1. The CVE entry and multiple connected sources confirm the issue and that a fix has been applied...

CVE-2025-26868

CVE-2025-26868 refers to a reflected XSS in the WordPress plugin Fast Flow (Fast Flow). Connected sources confirm the flaw is caused by improper neutralization of input during web page generation, enabling reflected cross-site scripting. Affected are Fast Flow versions up to 1.2.16. The vulnerabi...

CVE-2025-26987

CVE-2025-26987 describes a Reflected Cross-Site Scripting (XSS) vulnerability in Frontend Admin by DynamiApps (often listed as Frontend Admin by DynamiApps). The initial description states an XSS condition in the Shabti Kaplan Frontend Admin by DynamiApps and indicates affected versions from n/a ...

GHSA-4W32-C9G7-27QX Moodle allows reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

Moodle allows reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530

CVE-2025-26530 concerns Moodle where the question bank filter allowed a reflected XSS risk due to insufficient sanitization. The connected documents corroborate a reflected XSS in Moodle’s question bank filter, without detailing affected versions or patches in the provided sources. The CVE descri...

CVE-2025-26774

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rock Solid Responsive Modal Builder for High Conversion – Easy Popups easy-popups allows Reflected XSS.This issue affects Responsive Modal Builder for High Conversion – Easy Popups: from n/a throug...