16333 matches found
CVE-2025-23624 WordPress WpDevTool plugin <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alessandro Benoit WpDevTool wpdevtool allows Reflected XSS.This issue affects WpDevTool: from n/a through = 0.1.1...
CVE-2025-23624
CVE-2025-23624 is a Cross-Site Scripting vulnerability affecting the WordPress plugin WpDevTool by Alessandro Benoit. The issue is described as Improper Neutralization of Input During Web Page Generation (Reflected XSS) and affects WpDevTool versions from n/a up to 0.1.1. The CVSS v3.1 base score...
CVE-2025-23544
CVE-2025-23544 corresponds to a Reflected XSS in heart5 StatPressCN. Affected: StatPressCN versions up to 1.9.1. Root cause: Improper input neutralization during web page generation. Impact: Reflected injection that may trigger script execution in affected users’ browsers. Public details in conne...
CVE-2025-23541
CVE-2025-23541 is a Reflected XSS vulnerability in the WordPress plugin “Download, Downloads” (WordPress Download plugin by Edmon, also listed as ydn-download). The issue arises from improper neutralization of input during web page generation, enabling an attacker-controlled payload to be reflect...
CVE-2025-23541 WordPress Download, Downloads plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in edmon.parker Download, Downloads ydn-download allows Reflected XSS.This issue affects Download, Downloads : from n/a through = 1.4.2...
CVE-2025-22264 WordPress WP Query Creator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Patel WP Query Creator wp-query-creator allows Reflected XSS.This issue affects WP Query Creator: from n/a through = 1.0...
CVE-2025-22264 WordPress WP Query Creator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tarak Patel WP Query Creator allows Reflected XSS. This issue affects WP Query Creator: from n/a through 1.0...
CVE-2024-10539
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Uyumsoft Informatin Systems Uyumsoft ERP allows XSS Using Invalid Characters, Reflected XSS. This issue affects Uyumsoft ERP: before Erp4.2109.166p45...
CVE-2024-10539 Reflected XSS in Uyumsoft's ERP
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Uyumsoft Informatin Systems Uyumsoft ERP allows XSS Using Invalid Characters, Reflected XSS. This issue affects Uyumsoft ERP: before Erp4.2109.166p45...
CVE-2024-10539 Reflected XSS in Uyumsoft's ERP
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Uyumsoft Informatin Systems Uyumsoft ERP allows XSS Using Invalid Characters, Reflected XSS. This issue affects Uyumsoft ERP: before Erp4.2109.166p45...
PT-2025-5054 · Unknown · Fures Xtra Settings
Name of the Vulnerable Software and Affected Versions: fures XTRA Settings versions n/a through 2.1.8 Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected XSS. This means that an attacker can inject malicious scripts into the...
CVE-2025-23809
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sunil Nanda Blue Wrench Video Widget blue-wrench-videos-widget allows Reflected XSS.This issue affects Blue Wrench Video Widget: from n/a through = 2.1.0...
CVE-2025-23966
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ala Falaki a Gateway for Pasargad Bank on WooCommerce a-gateway-for-pasargad-bank-on-woocommerce allows Reflected XSS.This issue affects a Gateway for Pasargad Bank on WooCommerce: from n/a through...
CVE-2025-23959
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Linus Lundahl Good Old Gallery good-old-gallery allows Reflected XSS.This issue affects Good Old Gallery: from n/a through = 2.1.2...
CVE-2025-23882
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in misanthrop WP Download Codes wp-download-codes allows Reflected XSS.This issue affects WP Download Codes: from n/a through = 2.5.4...
CVE-2025-23811
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ghasemy14 WP2APP wp2appir allows Reflected XSS.This issue affects WP2APP: from n/a through = 2.6.2...
CVE-2025-23867
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in markcoker WordPress File Search wpfilesearch allows Reflected XSS.This issue affects WordPress File Search: from n/a through = 1.2...
CVE-2025-23866
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in E. Marten EU DSGVO Helper dsgvo allows Reflected XSS.This issue affects EU DSGVO Helper: from n/a through = 1.0.6.1...