CVE-2025-32570

CVE-2025-32570: ChillPay WooCommerce is affected by a Cross-Site Request Forgery to Stored Cross-Site Scripting (CSRF to stored XSS) vulnerability. Affected product: ChillPay WooCommerce (plugin for WordPress). Affected range: ChillPay WooCommerce 2.5.3 and earlier. Root cause and exact vectors a...

rangamaticollege.gov.bd Cross Site Scripting vulnerability OBB-4042961

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-33844

Incident summary: CVE-2023-33844 affects IBM Security Verify Governance 10.0.2 with a cross-site scripting (XSS) flaw in the Web UI. The root cause involves insufficient filtering/escaping of user-supplied data, enabling arbitrary JavaScript execution that can lead to credentials disclosure withi...

jomos.vn Cross Site Scripting vulnerability OBB-4042862

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

executive-class-at-mts-hotel.hotelinewyork.com Cross Site Scripting vulnerability OBB-4042754

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ForestBlog keywords parameter cross-site scripting vulnerability

ForestBlog is a blogging system. A cross-site scripting vulnerability exists in ForestBlog 20250321 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data by the parameter keywords, and can be exploited by an attacker to execute arbitrary Web...

WordPress plugin Doppler Forms 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress WP Project Manager plugin <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by siavashvafshar in WordPress Plugin WP Project Manager versions = 2.6.22...

CVE-2025-32211

CVE-2025-32211 (Broadstreet): Authenticated Stored Cross-Site Scripting in Broadstreet WordPress plugin, affected

event.ru Cross Site Scripting vulnerability OBB-4042681

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-3397

Summary: CVE-2025-3397 affects YzmCMS 7.1 in an unknown function within message.tpl; manipulating the gourl argument triggers cross-site scripting. Exploitation is possible remotely and public disclosure exists. Multiple sources (CNVD/CNNVD/NVD/OSV/etc.) confirm the issue but provide no official ...

classifieds.cleveland.com Cross Site Scripting vulnerability OBB-4042527

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-32188

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ILLID Advanced Woo Labels advanced-woo-labels allows Stored XSS.This issue affects Advanced Woo Labels: from n/a through = 2.15...

CVE-2025-32133

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Stored XSS.This issue affects Secure Copy Content Protection and Content Locking: from n/a through =...

CVE-2025-32169

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Suresh Prasad Showeblogin Social showeblogin-facebook-page-like-box allows DOM-Based XSS.This issue affects Showeblogin Social: from n/a through = 7.0...

CVE-2025-3219

A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project Discussions Module. The manipulation of the argument description leads to cross site scripting. It is...

duel-de-mots.com Cross Site Scripting vulnerability OBB-4042389

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-31900

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lexicata Lexicata lexicata allows Reflected XSS.This issue affects Lexicata: from n/a through = 1.0.16...

WordPress Link Library plugin <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Link Additional Parameters vulnerability discovered by siavashvafshar in WordPress Plugin Link Library versions = 7.7.3...

CVE-2025-32136

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in activecampaign ActiveCampaign activecampaign-subscription-forms allows Stored XSS.This issue affects ActiveCampaign: from n/a through = 8.1.16...