PT-2025-17809 · Unknown · Josheli Simple Google Photos Grid

Name of the Vulnerable Software and Affected Versions: josheli Simple Google Photos Grid versions 1.5 and earlier Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions 1.5 and earlier,...

PT-2025-17772 · Unknown · Novium Wowhead Tooltips

Name of the Vulnerable Software and Affected Versions: Novium WoWHead Tooltips versions n/a through 2.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-17804 · Unknown · Navegg Analytics

Name of the Vulnerable Software and Affected Versions: Navegg Analytics versions n/a through 3.3.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in Navegg Analytics. Recommendations: For versions n/a through 3.3.3, update to a version that contai...

PT-2025-17850

Name of the Vulnerable Software and Affected Versions h11 versions prior to 0.16.0 Description h11 is a Python implementation of HTTP/1.1. A leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. This...

PT-2025-17785 · Unknown · Smart Hashtags

Name of the Vulnerable Software and Affected Versions: Smart Hashtags versions through 7.2.3 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions through 7.2.3,...

PT-2025-17745 · Capturly · Capturly

Name of the Vulnerable Software and Affected Versions: Capturly versions n/a through 2.0.1 Description: The issue is related to Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File Inclusion ...

PT-2025-17741 · Unknown · Cww Portfolio

Name of the Vulnerable Software and Affected Versions: CWW Portfolio versions 1.3.1 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This...

PT-2025-17822 · WordPress · Blog Manager Wp

Name of the Vulnerable Software and Affected Versions: Blog Manager WP versions 1.0.0 through 1.0.5 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a Stored XSS...

PT-2025-17773 · Unknown · Occupancyplan

Name of the Vulnerable Software and Affected Versions: occupancyplan versions 1.0.3.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.0.3.0 and earlier, update to a version that contains a fix for this...

PT-2025-17794 · Unknown · Nepali Post Date

Name of the Vulnerable Software and Affected Versions: Nepali Post Date versions through 5.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-17868

Name of the Vulnerable Software and Affected Versions React Router versions 7.0 through 7.5.1 Description The issue allows an attacker to modify pre-rendered data by adding a header to the request, potentially leading to various exploits, including stored XSS. This is possible due to a...

PT-2025-17827 · Devignstudiosltd · Devignstudiosltd Covid-19 (Coronavirus) Update Your Customers

Name of the Vulnerable Software and Affected Versions: devignstudiosltd COVID-19 Coronavirus Update Your Customers versions 1.5.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Store...

PT-2025-17819 · Unknown · All In One Time Clock Lite

Name of the Vulnerable Software and Affected Versions: All in One Time Clock Lite versions 1.3.324 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For All in One Time Clock Lite versions 1.3.324 and...

PT-2025-17704 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.x through 9.11.10 Mattermost versions 10.4.x through 10.4.2 Mattermost versions 10.5.x through 10.5.0 Description: The issue concerns the improper validation of permissions for the API endpoint...

PT-2025-17815 · Andrey Mikhalchuk · 360 View

Name of the Vulnerable Software and Affected Versions: Andrey Mikhalchuk 360 View versions 1.1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject...

PT-2025-17760 · Unknown · M A Vinoth Kumar Frontend Dashboard

Name of the Vulnerable Software and Affected Versions: M A Vinoth Kumar Frontend Dashboard versions 2.2.5 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attack...

PT-2025-17795 · Unknown · Michael Cannon Flickr Shortcode Importer

Name of the Vulnerable Software and Affected Versions: Michael Cannon Flickr Shortcode Importer versions n/a through 2.2.3 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 2.2.3, update to a version...

PT-2025-17681 · Westermo · Weos

Name of the Vulnerable Software and Affected Versions: Westermo WeOS versions 5 through 5.23.0 Description: The issue allows for a reboot via a malformed ESP packet. Recommendations: For Westermo WeOS versions 5 through 5.23.0, update to a version later than 5.23.0 to resolve the issue...

PT-2025-17764 · Unknown · Yash Binani Time Based Greeting

Name of the Vulnerable Software and Affected Versions: Yash Binani Time Based Greeting versions 2.2.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For Yash Binani Time Based Greeting versions 2.2.2 and earlier, upda...

PT-2025-17791 · WordPress · Wp Customize Login Page

Name of the Vulnerable Software and Affected Versions: WP Customize Login Page versions 1.6.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...