Lucene search
+L

4 matches found

OSV
OSV
added 2025/12/04 6:02 p.m.7 views

CVE-2025-14013 JIZHICMS Comment addcomment.html cross site scripting

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. Th...

4.8CVSS4.1AI score
SaveExploits0References6
NVD
NVD
added 2025/10/25 7:15 a.m.12 views

CVE-2025-8483

The The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.5.5. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. Th...

6.3CVSS0.00246EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/09/22 7:10 p.m.7 views

WordPress Directory Pro Plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Directory Pro versions = 2.5.5...

6.5CVSS6AI score0.00268EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/20 9:11 p.m.9 views

WordPress LaTeX2HTML plugin <= 2.5.5 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin LaTeX2HTML versions = 2.5.5...

6.1CVSS6.3AI score0.00434EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder