CVE-2025-68070

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vektor,Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Stored XSS.This issue affects VK Google Job Posting Manager: from n/a through = 1.2.22...

CVE-2025-68070

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vektor,Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Stored XSS.This issue affects VK Google Job Posting Manager: from n/a through = 1.2.22...

CVE-2025-68070 WordPress VK Google Job Posting Manager plugin <= 1.2.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vektor,Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Stored XSS.This issue affects VK Google Job Posting Manager: from n/a through = 1.2.22...

EUVD-2025-33819

The WP Freeio plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.21. This is due to the processregister function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the...

CVE-2025-11533

The WP Freeio plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.21. This is due to the processregister function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the...

CVE-2025-11533

CVE-2025-11533 (WP Freeio, WordPress) — Privilege escalation in WP Freeio is caused by the process_register() function not restricting user registration roles, allowing unauthenticated users to register as ‘administrator’ and gain admin access in all versions up to 1.2.21. The vulnerability is ra...

VulnCheck KEV: CVE-2025-11533

The WP Freeio plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.21. This is due to the processregister function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the...

PT-2025-41644

Name of the Vulnerable Software and Affected Versions WP Freeio versions prior to 1.4.29 WP Freeio versions 1.2.21 and earlier Description The WP Freeio plugin for WordPress is affected by a privilege escalation issue. The process register function does not adequately restrict user role assignmen...

WordPress WP Freeio plugin <= 1.2.21 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Foxyyy in WordPress Plugin WP Freeio versions = 1.2.21...

EUVD-2022-6449

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-41444

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross Site Scripting XSS vulnerability in Cacti 1.2.21 via crafted POST request to graphsnew.php. CVE-2022-41444 Note that Nessus relies on the presence of the...

CVE-2022-2495

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2470

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

Cacti 跨站脚本漏洞

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool uses snmpget to obtain data, uses RRDtool to draw graphs for analysis, and provides data and user management features. A cross-site scripting vulnerability exists in Cacti version 1.2.21, whi...

Design/Logic Flaw

Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service ReDoS via the angular.copy utility function due to the usage of an insecure regular expression. Exploiting this vulnerability is possible by a large carefully-crafted input, which can result in...

CVE-2022-36859

Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.21-6 allows privileged attackers to trigger a XSS on a victim's devices...

SAMSUNG Mobile devices 跨站脚本漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A cross-site scripting vulnerability exists in SAMSUNG Mobile devices version 1.2.21-6, which stems from the SmartTagPlugin containing an incorrect input...

PT-2022-23663 · Unknown · Smarttagplugin

Name of the Vulnerable Software and Affected Versions: SmartTagPlugin versions prior to 1.2.21-6 Description: The issue is related to improper input validation in the SmartTagPlugin, allowing privileged attackers to trigger a cross-site scripting XSS attack on a victim's devices. Recommendations:...

CVE-2022-2470

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 1.2.21...

CVE-2022-2495

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.2.21...