10736 matches found
CVE-2025-23438
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vincent Mimoun-Prat WP PT-Viewer wp-ptviewer allows Reflected XSS.This issue affects WP PT-Viewer: from n/a through = 2.0.2...
CVE-2025-23941
CVE-2025-23941 details (connected RH/CVE and EUVD sources): Stored XSS in MeinTurnierplan.de Widget Viewer due to improper input neutralization during web page generation. Affected software: MeinTurnierplan.de Widget Viewer (versions up to 1.1). The issue is described as cross-site scripting with...
CVE-2025-23940
CVE-2025-23940 concerns the WordPress plugin Image Switcher . The vulnerability is a stored cross-site scripting (XSS) issue described as an improper input neutralization during web page generation. Public details in the connected Red Hat and Wordfence entries confirm affected software as Image S...
CVE-2025-23940 WordPress jupdf pdf viewer plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in horiyuki Image Switcher image-switcher allows Stored XSS.This issue affects Image Switcher: from n/a through = 0.1.1...
CVE-2025-23940 WordPress jupdf pdf viewer plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in horiyuki Image Switcher image-switcher allows Stored XSS.This issue affects Image Switcher: from n/a through = 0.1.1...
CVE-2025-23868 WordPress Chess Tempo Viewer plugin <= 0.9.5 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mliebelt Chess Tempo Viewer chesstempoviewer allows Stored XSS.This issue affects Chess Tempo Viewer: from n/a through = 0.9.5...
CVE-2025-23868 WordPress Chess Tempo Viewer plugin <= 0.9.5 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mliebelt Chess Tempo Viewer chesstempoviewer allows Stored XSS.This issue affects Chess Tempo Viewer: from n/a through = 0.9.5...
CVE-2025-23868
CVE-2025-23868 : Stored XSS in Chess Tempo Viewer (Markus Liebelt). Described as Improper Neutralization of Input During Web Page Generation; affects Chess Tempo Viewer versions from n/a through 0.9.5. CVSS v3.1 base score 6.5 (Medium) with NETWORK attack vector, low to moderate complexity, user ...
CVE-2025-23767
CVE-2025-23767 covers a Stored XSS in Revolutionart Marmoset Viewer. Public details show affected product: Marmoset Viewer; vulnerable component: page generation input handling; root cause: improper neutralization of input during web page generation. Impact per provided metrics indicates Low conf...
CVE-2025-23767 WordPress Marmoset Viewer plugin <= 1.9.3 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revoxis Marmoset Viewer marmoset-viewer allows Stored XSS.This issue affects Marmoset Viewer: from n/a through = 1.9.3...
CVE-2025-23767 WordPress Marmoset Viewer plugin <= 1.9.3 - Stored Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revoxis Marmoset Viewer marmoset-viewer allows Stored XSS.This issue affects Marmoset Viewer: from n/a through = 1.9.3...
CVE-2025-23438
The CVE-2025-23438 entry concerns a Reflected XSS in MarvinLabs WP PT-Viewer. Affected product: WP PT-Viewer (MarvinLabs). Vulnerable component: input handling during web page generation (Reflected XSS). Impact per available data: potential client-side script execution (low confidentiality/integr...
CVE-2025-23438 WordPress WP PT-Viewer plugin <= 2.0.2 - Reflected XSS vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vincent Mimoun-Prat WP PT-Viewer wp-ptviewer allows Reflected XSS.This issue affects WP PT-Viewer: from n/a through = 2.0.2...
WordPress MeinTurnierplan.de Widget Viewer plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin MeinTurnierplan.de Widget Viewer versions = 1.1...
WordPress jupdf pdf viewer plugin <= 0.1.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Image Switcher versions = 0.1.1...
WordPress Chess Tempo Viewer plugin <= 0.9.5 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Chess Tempo Viewer versions = 0.9.5...
WordPress Marmoset Viewer plugin <= 1.9.3 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Marmoset Viewer versions = 1.9.3...
WordPress WP PT-Viewer plugin <= 2.0.2 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Joshua Chan in WordPress Plugin WP PT-Viewer versions = 2.0.2...
WordPress plugin MeinTurnierplan.de Widget Viewer 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-5154 · Markus Liebelt · Markus Liebelt Chess Tempo Viewer
Name of the Vulnerable Software and Affected Versions: Markus Liebelt Chess Tempo Viewer versions 0.9.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting XSS. This means that an attacker can injec...