CVE-2025-49862 WordPress Ebook Store plugin <= 5.8008 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in motov.net Ebook Store ebook-store allows Stored XSS.This issue affects Ebook Store: from n/a through = 5.8008...

PT-2025-25722 · Unknown · Ebook Store

Name of the Vulnerable Software and Affected Versions: Ebook Store versions n/a through 5.8008 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

WordPress Plugin EBook Store Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-49862: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in motov.net Ebook Store ebook-store allows Stored XSS.This issue affects Ebook Store: from n/a through = 5.8008...

CVE-2025-6131

A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store/edit/ of the component POST Request Parameter Handler. The manipulation of the argument Restaurant Name/Address leads to cross site...

Astra Linux – Vulnerability in Firefox

The length of the certificate was not properly checked when it was added to the certificate store. In practice, only trusted data was processed. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check of BO’s backing stores when determining GFX12 PTE flags PRT BOs may not have any backing store, so bo-tbo.resource will be NULL. Check for this before dereferencing. Cherry-picked from commit...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: ibmveth: Fix for the issue where vethpoolstore could hang Changes: - A single error handling mechanism was created in vethpoolstore. - The commit message was significantly expanded, including previous explanatory text...

CodeAstro Food Ordering System: Code Injection Vulnerability

CodeAstro Food Ordering System is a food ordering system from CodeAstro. A code injection vulnerability exists in CodeAstro Food Ordering System version 1.0, which stems from cross-site scripting due to incorrect manipulation of the Restaurant Name/Address parameter in the file /admin/store/edit/...

TencentOS Server 4: python-glance-store (TSSA-2024:0824)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0824 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

[SECURITY] Fedora 42 Update: valkey-8.0.3-3.fc42

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

[SECURITY] Fedora 41 Update: valkey-8.0.3-3.fc41

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

vantage6-algorithm-store (>=4.3.0b3, <=4.11.0rc4), vantage6-node (>=4.0.0a2, <=4.11.0rc4) +1 more potentially affected by CVE-2025-43863 via vantage6 (>=4.0.0a2, <=4.11.0rc4)

vantage6 PYPI version =4.0.0a2, =4.3.0b3, =4.0.0a2, =4.0.0a2, =4.11.0rc4 Source cves: CVE-2025-43863 Source advisory: GHSA-J6G5-P62X-58HW...

vantage6-algorithm-store (>=4.3.0b3, <=4.11.0rc4), vantage6-node (>=0.0.0b0, <=4.11.0rc4) +1 more potentially affected by CVE-2025-43863 via vantage6 (>=0.0.0b3, <=4.11.0rc4)

vantage6 PYPI version =0.0.0b3, =4.3.0b3, =0.0.0b0, =0.0.0b0, =4.11.0rc4 Source cves: CVE-2025-43863 Source advisory: MEND:CVE-2025-43863...

WordPress Ebook Store plugin <= 5.8008 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Trần Minh Huy in WordPress Plugin Ebook Store versions = 5.8008...

June 10, 2025—KB5060999 (OS Builds 22621.5472 and 22631.5472)

None None...

June 10, 2025—KB5060533 (OS Builds 19044.5965 and 19045.5965) - EXPIRED

None None...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when cowfilerange failed CVE-2024-57976 In the Linux kernel, the following vulnerability has been resolved: kernel: be more careful about dupmmap failures and uprobe registering...

SAP BusinessObjects Business Intelligence Cross-site Scripting Vulnerability

SAP BusinessObjects Business Intelligence is an enterprise-class business intelligence solution from SAP. SAP BusinessObjects Business Intelligence suffers from a cross-site scripting vulnerability that originates from an unauthenticated attacker who can store malicious scripts, which can be...

org.keycloak.protocol.services: Keycloak hostname verification

A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended...