WordPress visualslider Sldier plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin visualslider Sldier versions = 1.1.1...

Librenms has a reflected XSS on error alert

XSS on the parameters:/addhost - param: community of Librenms versions 24.10.1 https://github.com/librenms/librenms allows remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potentia...

GHSA-G84X-G96G-RCJC Librenms has a reflected XSS on error alert

XSS on the parameters:/addhost - param: community of Librenms versions 24.10.1 https://github.com/librenms/librenms allows remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potentia...

PT-2025-4875 · Oren Yomtov · Mass Custom Fields Manager

Name of the Vulnerable Software and Affected Versions: Oren Yomtov Mass Custom Fields Manager versions 1.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS. This means an attacker can trick a user into performing unintended actions on...

PT-2025-4889 · Unknown · Emailshroud

Name of the Vulnerable Software and Affected Versions: EmailShroud versions prior to 2.2.1 EmailShroud version 2.2.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Reflected XSS. This means an attacker can trick a user into performing unintended actions on a...

PT-2025-4886 · Myriad Solutionz · Myriad Solutionz Stars Smtp Mailer

Name of the Vulnerable Software and Affected Versions: Myriad Solutionz Stars SMTP Mailer versions 1.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows Reflected XSS. This means that an attacker can inject malicious scripts...

PT-2025-4880 · Marvinlabs · Wp Pt-Viewer

Name of the Vulnerable Software and Affected Versions: MarvinLabs WP PT-Viewer versions prior to 2.0.2 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This enables an attacker to...

CVE-2025-22795

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digitaldonkey Multilang Contact Form multilang-contact-form allows Reflected XSS.This issue affects Multilang Contact Form: from n/a through = 1.5...

CVE-2025-22776

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codebycarter WP Bulletin Board wp-bulletin-board allows Reflected XSS.This issue affects WP Bulletin Board: from n/a through = 1.1.4...

CVE-2025-22764

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vipul Jariwala WP Post Corrector wp-post-corrector allows Reflected XSS.This issue affects WP Post Corrector: from n/a through = 1.0.2...

CVE-2025-22765

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weiluri WP Order By wp-order-by allows Reflected XSS.This issue affects WP Order By: from n/a through = 1.4.2...

CVE-2025-22754

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Berkman Klein Center Amber amberlink allows Reflected XSS.This issue affects Amber: from n/a through = 1.4.4...

CVE-2025-22755

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bavington WP Headmaster wp-headmaster allows Reflected XSS.This issue affects WP Headmaster: from n/a through = 0.3...

CVE-2025-22750

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Patel Post Carousel & Slider post-types-carousel-slider allows Reflected XSS.This issue affects Post Carousel & Slider: from n/a through = 1.0.4...

CVE-2025-22751

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in farinspace Partners partners allows Reflected XSS.This issue affects Partners: from n/a through = 0.2.0...

CVE-2025-22752

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WesternDeal GSheetConnector for Forminator Forms gsheetconnector-forminator allows Reflected XSS.This issue affects GSheetConnector for Forminator Forms: from n/a through = 1.0.12...

CVE-2025-22317

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gallery Ape Photo Gallery – Image Gallery by Ape gallery-images-ape allows Reflected XSS.This issue affects Photo Gallery – Image Gallery by Ape: from n/a through = 2.2.8...

CVE-2025-22317 WordPress Gallery Images Ape plugin <= 2.2.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gallery Ape Photo Gallery – Image Gallery by Ape gallery-images-ape allows Reflected XSS.This issue affects Photo Gallery – Image Gallery by Ape: from n/a through = 2.2.8...

CVE-2025-22317

CVE-2025-22317 is a Reflected XSS in the WordPress plugin Gallery Images Ape (gallery-images-ape) affecting versions up to and including 2.2.8. The issue stems from improper neutralization of input during Web Page Generation, enabling reflected script execution. Documented impact is Cross-Site Sc...

CVE-2025-22317 WordPress Gallery Images Ape plugin <= 2.2.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in galleryape Photo Gallery – Image Gallery by Ape allows Reflected XSS.This issue affects Photo Gallery – Image Gallery by Ape: from n/a through 2.2.8...