CVE-2025-23888

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GrandSlambert Custom Page Extensions custom-page-extensions allows Reflected XSS.This issue affects Custom Page Extensions: from n/a through = 0.6...

CVE-2025-23889

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tormorten FooGallery Captions foogallery-captions allows Reflected XSS.This issue affects FooGallery Captions: from n/a through = 1.0.2...

CVE-2025-23522

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matthew Haines-Young HM Portfolio hm-portfolio allows Reflected XSS.This issue affects HM Portfolio: from n/a through = 1.1.1...

CVE-2025-23622

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sabuj Kundu CBX Accounting & Bookkeeping cbxwpsimpleaccounting allows Reflected XSS.This issue affects CBX Accounting & Bookkeeping: from n/a through = 1.3.14...

CVE-2025-23734

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Casey Bisson Gigaom Sphinx go-sphinx allows Reflected XSS.This issue affects Gigaom Sphinx: from n/a through = 0.1...

CVE-2025-23621

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in algothemes Causes – Donation Plugin causes allows Reflected XSS.This issue affects Causes – Donation Plugin: from n/a through = 1.0.01...

CVE-2025-23885

CVE-2025-23885 refers to a Reflected XSS in the WordPress plugin MJ Contact us (through version 5.2.3). The vulnerability arises from improper neutralization of input during web page generation, enabling attacker-supplied input to be reflected in pages served to users. Public sources in the conne...

CVE-2025-23889

CVE-2025-23889 is a Reflected XSS in the WordPress plugin FooGallery Captions. Affected versions are 1.0.2 and earlier; the issue arises from improper input neutralization during web page generation, enabling reflection-based script injection. The entry is corroborated by multiple sources (NVD/Re...

CVE-2025-23888 WordPress Custom Page Extensions Plugin <= 0.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GrandSlambert Custom Page Extensions custom-page-extensions allows Reflected XSS.This issue affects Custom Page Extensions: from n/a through = 0.6...

CVE-2025-23737 WordPress Network-Favorites plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thobian Network-Favorites network-favorites allows Reflected XSS.This issue affects Network-Favorites: from n/a through = 1.1...

CVE-2025-23838

CVE-2025-23838 is a Reflected XSS in the WordPress Bauernregeln plugin NotFound, affecting versions n/a–1.0.1 (per sources from NVD/Red Hat) and publicly documented as a WordPress plugin vulnerability. The linked Red Hat/NVD entries confirm the same description and affected range. The PTSecurity ...

CVE-2025-23711 WordPress Quote me plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quincy Kwende Quote me quote-me allows Reflected XSS.This issue affects Quote me: from n/a through = 1.0...

CVE-2025-23711

CVE-2025-23711 is a Reflected XSS in the WordPress Quote me plugin (

CVE-2025-23734

CVE-2025-23734 — Reflected XSS in NotFound Gigaom Sphinx WordPress plugin (go-sphinx) up to version 0.1 due to improper input neutralization during web page generation. Impact: potential script execution in victims’ browsers. Affected: Gigaom Sphinx plugin (WordPress). Remediation: upgrade to a v...

CVE-2025-23737

CVE-2025-23737 describes a Reflected XSS in WordPress Network-Favorites (NotFound Network-Favorites) caused by improper input neutralization during web page generation. Affected products: Network-Favorites up to version 1.1 (as per multiple sources). Impact notes in the CVE context indicate refle...

CVE-2025-23837

CVE-2025-23837 is a Reflected XSS in the WordPress plugin One Backend Language (affected: versions up to 1.0). The issue arises from improper input neutralization during web page generation. Documented impact notes show low confidentiality, integrity, and availability implications; CVSS v3.1 base...

CVE-2025-23427

CVE-2025-23427 is a Reflected XSS vulnerability in the WordPress Redux Converter plugin (Redux Converter) affecting versions up to 1.1.3.1. The NVD/Metrics indicate CVSS v3.1: base score 7.1 (HIGH), vectors: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L. Connected Red Hat/PTSecurity notes confirm the issue...

CVE-2025-23622

CVE-2025-23622 corresponds to a Reflected XSS in the WordPress CBX Accounting & Bookkeeping plugin (versions n/a through 1.3.14). The issue stems from improper input neutralization during web page generation. Public sources (Red Hat and CVE feed) confirm the affected product/version and describe ...

CVE-2025-23522 WordPress HM Portfolio plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matthew Haines-Young HM Portfolio hm-portfolio allows Reflected XSS.This issue affects HM Portfolio: from n/a through = 1.1.1...

PT-2025-4980 · Unknown · Cbx Accounting & Bookkeeping

Name of the Vulnerable Software and Affected Versions: CBX Accounting & Bookkeeping versions 1.3.14 and earlier Description: The issue affects CBX Accounting & Bookkeeping, allowing Reflected XSS due to improper neutralization of input during web page generation. This enables attackers to inject...