CVE-2025-30558

CVE-2025-30558 : A CSRF flaw in the WordPress plugin ANAC XML Render (vendor: EnzoCostantini55) could enable a stored XSS. Affected versions are listed as

CVE-2025-30558 WordPress ANAC XML Render plugin <= 1.5.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in EnzoCostantini55 ANAC XML Render anac-xml-render allows Stored XSS.This issue affects ANAC XML Render: from n/a through = 1.5.7...

WordPress ANAC XML Render plugin <= 1.5.7 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin ANAC XML Render versions = 1.5.7...

PT-2025-12656 · Uguu · Uguu

Name of the Vulnerable Software and Affected Versions: Uguu versions 1.8.9 and earlier Description: The issue allows Cross Site Scripting XSS via JavaScript in XML files. Recommendations: For versions 1.8.9 and earlier, consider disabling JavaScript execution in XML files as a temporary workaroun...

CVE-2024-55279

Uguu through 1.8.9 allows Cross Site Scripting XSS via JavaScript in XML files...

CVE-2024-55279

CVE-2024-55279 affects Uguu up to version 1.8.9. The issue is a Cross-Site Scripting (XSS) vulnerability via JavaScript in XML files, as described across multiple feeds (NVD, Red Hat, CVE lists). Affected product: Uguu 1.8.9 and earlier; vulnerability stems from handling of JavaScript in XML file...

WordPress plugin ANAC XML Render 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

CVE-2024-55279

Uguu through 1.8.9 allows Cross Site Scripting XSS via JavaScript in XML files...

CVE-2024-55279

Uguu through 1.8.9 allows Cross Site Scripting XSS via JavaScript in XML files...

Important: libxslt security update

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. Security Fixes: libxslt: Use-After-Free in libxslt numbers.c CVE-2025-24855 For...

ALSA-2025:3107 Important: libxslt security update

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. Security Fixes: libxslt: Use-After-Free in libxslt numbers.c CVE-2025-24855 For...

Mageia: Security Advisory (MGASA-2025-0109)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-25036

Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows XML Injection.This issue affects all versions of JPlatform 10 before 10.0.8 SP8...

CVE-2025-30348

encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string with relocation of later data...

MGASA-2025-0109 Updated expat packages fix security vulnerability

Improper restriction of xml entity expansion depth in libexpat. CVE-2024-8176 NOTE: upstream deemed this fix incomplete after it was initially pushed. The complete fix was submitted along with the fix for CVE-2025-59375...

Updated expat packages fix security vulnerability

Improper restriction of xml entity expansion depth in libexpat. CVE-2024-8176 NOTE: upstream deemed this fix incomplete after it was initially pushed. The complete fix was submitted along with the fix for CVE-2025-59375...

SUSE CVE-2025-30348

encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string with relocation of later data...

CVE-2025-25036

Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows XML Injection.This issue affects all versions of JPlatform 10 before 10.0.8 SP8...

CVE-2025-25036 Jalios JPlatform 10 Authenticated XML External Entity Injection (XXE)

Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows XML Injection.This issue affects all versions of JPlatform 10 before 10.0.8 SP8...

CVE-2025-25036 Jalios JPlatform 10 Authenticated XML External Entity Injection (XXE)

Improper Restriction of XML External Entity Reference vulnerability in Jalios JPlatform allows XML Injection.This issue affects all versions of JPlatform 10 before 10.0.8 SP8...