PT-2025-5031 · Unknown · Notfound Staging Cdn

Name of the Vulnerable Software and Affected Versions: NotFound Staging CDN versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This enables potential attacke...

PT-2025-5032 · Unknown · Podčlánková Inzerce

Name of the Vulnerable Software and Affected Versions: Podčlánková inzerce versions n/a through 2.4.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This means that an attacker can inject...

PT-2025-4689 · Mapbox · Mapbox For Wp Advanced

Name of the Vulnerable Software and Affected Versions: Mapbox for WP Advanced versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables an attacker to...

PT-2025-4966 · Unknown · Eelv-Newsletter

Name of the Vulnerable Software and Affected Versions: EELV Newsletter versions prior to 4.8.2 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This enables an attacker to inject...

PT-2025-5030 · Unknown · Ctygrid Hyp3Rl0Cal Search

Name of the Vulnerable Software and Affected Versions: CtyGrid Hyp3rL0cal Search versions n/a through 0.1.1.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected XSS. This means an attacker can inject malicious scripts into...

PT-2025-5109 · Unknown · Blue Wrench Video Widget

Name of the Vulnerable Software and Affected Versions: Blue Wrench Video Widget versions n/a through 2.1.0 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows reflected XSS. This problem affects the...

CVE-2025-24459

In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page...

CVE-2025-23580

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matthew BizLibrary bizlibrary allows Reflected XSS.This issue affects BizLibrary: from n/a through = 1.1...

CVE-2025-23461

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xkollsoftware Social2Blog social2blog allows Reflected XSS.This issue affects Social2Blog: from n/a through = 0.2.990...

CVE-2025-23489

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brian Messenlehner WP-Announcements wp-announcements allows Reflected XSS.This issue affects WP-Announcements: from n/a through = 1.8...

CVE-2025-23551

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in razvypp SexBundle sexbundle allows Reflected XSS.This issue affects SexBundle: from n/a through = 1.4...

CVE-2025-23454

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flashmaniac Nature FlipBook vertical-diamond-flipbook-flash allows Reflected XSS.This issue affects Nature FlipBook: from n/a through = 1.7...

CVE-2025-24459

CVE-2025-24459 — JetBrains TeamCity is affected on versions prior to 2024.12.1. The vulnerability is a reflected cross‑site scripting (XSS) issue on the Vault Connection page. Root cause details are not elaborated beyond “reflected XSS,” and exploitation status is not provided in the documents. I...

CVE-2025-24459

In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page...

CVE-2025-24459

In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page...

CVE-2025-23551

CVE-2025-23551 affects WordPress SexBundle; the issue is a Reflected Cross-Site Scripting vulnerability caused by improper input neutralization during web page generation, affecting SexBundle versions up to 1.4. CVSS 3.1 base score 7.1 (HIGH) with network attack vector, user interaction required....

CVE-2025-23551 WordPress SexBundle plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in razvypp SexBundle sexbundle allows Reflected XSS.This issue affects SexBundle: from n/a through = 1.4...

CVE-2025-23551 WordPress SexBundle plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in P. Razvan SexBundle allows Reflected XSS. This issue affects SexBundle: from n/a through 1.4...

CVE-2025-23998

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in raratheme UltraLight the-ultralight allows Reflected XSS.This issue affects UltraLight: from n/a through = 1.2...

CVE-2025-22733

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Reflected XSS.This issue affects My auctions allegro: from n/a through = 3.6.18...