CVE-2025-23890 WordPress Easy Tweet Embed plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tom Ewer Easy Tweet Embed easy-tweet-embed allows DOM-Based XSS.This issue affects Easy Tweet Embed: from n/a through = 1.7...

Typora 跨站脚本漏洞

Typora is an editor. A cross-site scripting vulnerability exists in Typora versions v1.0.0 through v1.7, which stems from a cross-site scripting vulnerability in the Markdown editor that can be exploited by an attacker to upload a Markdown file to execute arbitrary code...

PHPSHE SQL注入漏洞

PHPSHE is a set of online shopping mall system of China PHPSHE company. The system supports express tracking, online chat, order evaluation and statistics. SQL injection vulnerability exists in PHPSHE 1.7. An attacker can exploit this vulnerability by using the admin.php?mod=user&userlevelid=1...