CVE-2024-13748

The Ultimate Classified Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title parameter in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2023-51335

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2024-13748: Improper Neutralization of Input During Web Page Generation

The Ultimate Classified Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title parameter in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2023-51325

PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

PT-2025-7301 · Phpjabbers · Phpjabbers Bus Reservation System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Bus Reservation System version 1.1 Description: The issue concerns Multiple Stored Cross-Site Scripting XSS in the title and name parameters. This allows for malicious scripts to be stored and executed when a user accesses the...

PT-2025-7592 · Phpress · Ppress

Name of the Vulnerable Software and Affected Versions: Ppress version 0.0.9 Description: A stored Cross-Site Scripting vulnerability in the "related recommendations" feature allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and...

CVE-2023-51325: Improper Neutralization of Input During Web Page Generation

PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51315: Improper Neutralization of Input During Web Page Generation

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "seatname, pluginsmsapikey, pluginsmscountrycode, title, name" parameters...

CVE-2023-51306: Improper Neutralization of Input During Web Page Generation

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "name, title" parameters...

CVE-2023-51335: Improper Neutralization of Input During Web Page Generation

PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51338: Improper Neutralization of Input During Web Page Generation

PHPJabbers Meeting Room Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters of index.php page...

CVE-2023-51318: Improper Neutralization of Input During Web Page Generation

PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...

CVE-2023-51317: Improper Control of Generation of Code

PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51308: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the "name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

PT-2025-7300 · Phpjabbers · Phpjabbers Restaurant Booking System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Restaurant Booking System version 3.0 Description: The issue concerns multiple HTML injection vulnerabilities in the parameters name, plugin sms api key, plugin sms country code, and title. This allows for potential malicious HTML...

PT-2025-7307

Name of the Vulnerable Software and Affected Versions PHPJabbers Shared Asset Booking System version 1.0 Description The issue concerns Multiple Stored Cross-Site Scripting XSS in the title and name parameters. This allows for the storage and execution of malicious scripts, potentially leading to...

PT-2025-7318

Name of the Vulnerable Software and Affected Versions PHPJabbers Meeting Room Booking System version 1.0 Description The issue concerns multiple stored Cross-Site Scripting XSS vulnerabilities in the title and name parameters of the index.php page. This allows for the potential execution of...

PT-2025-7290

Name of the Vulnerable Software and Affected Versions PHPJabbers Event Ticketing System version 1.0 Description The issue concerns multiple stored Cross-Site Scripting XSS vulnerabilities in the name and title parameters. This allows for malicious scripts to be stored and executed on the system...

CVE-2025-25973

A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and article.tags parameters...

PT-2025-7386 · WordPress · Ultimate Classified Listings

Name of the Vulnerable Software and Affected Versions: Ultimate Classified Listings plugin for WordPress versions up to, and including, 1.4 Description: The issue is related to Stored Cross-Site Scripting via the Title parameter due to insufficient input sanitization and output escaping. This...