EUVD-2025-28119

Malicious code in bioql PyPI...

CVE-2025-0876 XSS in Isin Basi Advertisement & IT's Workif

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Isin Basi Advertisement Information Technologies Trade Inc. IT's Workif allows Cross-Site Scripting XSS. This issue affects IT's Workif: through 20251003. NOTE: The vendor was contacted earl...

CVE-2025-58033

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in leeshadle Draft website-builder allows Stored XSS.This issue affects Draft: from n/a through = 3.0.9...

CVE-2025-59574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Travel Engine WP Travel Engine wte-elementor-widgets allows Stored XSS.This issue affects WP Travel Engine: from n/a through = 1.4.2...

CVE-2025-57935

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ricky Dawn Bot Block - Stop Spam Referrals in Google Analytics bot-block-stop-spam-google-analytics-referrals allows Stored XSS.This issue affects Bot Block - Stop Spam Referrals in Google Analytic...

CVE-2025-6575

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dolusoft Omaspot allows Reflected XSS.This issue affects Omaspot: before 12.09.2025...

CVE-2025-48103

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mulscully Today's Date Inserter todays-date-inserter allows Stored XSS.This issue affects Today's Date Inserter: from n/a through = 1.2.1...

PT-2025-36124

Name of the Vulnerable Software and Affected Versions: ARI Fancy Lightbox versions through 1.4.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, specifically a Stored Cross-site Scripting XSS issue. This allows for the injection of...

CVE-2025-49056

CVE-2025-49056 affects the WordPress plugin 多说社会化评论框 (versions n/a through 1.2). The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by improper neutralization of input during web page generation. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L with a base score of 7.1 ...

SambaBox 跨站脚本漏洞

SambaBox is a Samba-based file sharing server solution from SambaBox, Inc. A cross-site scripting vulnerability exists in SambaBox versions prior to 5.1, which stems from improper input neutralization during web page generation and could lead to cross-site scripting...

CVE-2025-22855

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Fortinet FortiClient before 7.4.1 may allow the EMS administrator to send messages containing javascript code...

PT-2025-7758 · Unknown · Reactive Mortgage Calculator

Name of the Vulnerable Software and Affected Versions: Reactive Mortgage Calculator versions 1.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a Stored XSS...

CVE-2025-26767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Qubely – Advanced Gutenberg Blocks allows Stored XSS. This issue affects Qubely – Advanced Gutenberg Blocks: from n/a through 1.8.12...

PT-2025-5536 · Unknown · Faq Builder Ays

Name of the Vulnerable Software and Affected Versions: FAQ Builder AYS versions 1.7.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS attacks. This means that an attacker can inject malicious scripts into th...

PT-2025-5228 · Unknown · Divengine Gallery

Name of the Vulnerable Software and Affected Versions: DivEngine Gallery: Hybrid – Advanced Visual Gallery versions 1.4.0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site Scripting XSS. This means an...

PT-2025-4717 · Unknown · Surbma | Premium Wp

Name of the Vulnerable Software and Affected Versions: Surbma | Premium WP versions prior to 9.0 Description: The issue is related to improper neutralization of input during web page generation, which allows DOM-Based XSS. This means that an attacker could potentially inject malicious scripts int...

PT-2024-36099 · Unknown · Roninwp Fat Services Booking

Name of the Vulnerable Software and Affected Versions: Roninwp FAT Services Booking versions n/a through 5.6 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. This allows for stored XSS attack...

PT-2024-34988 · Unknown · Bamboo Mcr Bamboo Enquiries

Name of the Vulnerable Software and Affected Versions: Bamboo Mcr Bamboo Enquiries versions 1.9.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

PT-2024-35069 · Unknown · Web Testimonials

Name of the Vulnerable Software and Affected Versions: ESB Testimonials versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the...

CVE-2024-51587

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Softfirm Definitive Addons for Elementor allows Stored XSS.This issue affects Definitive Addons for Elementor: from n/a through 1.5.16...