2699 matches found
CVE-2024-2655
The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post widgets in all versions up to, and including, 8.3.5 due to insufficient input sanitization and output escaping on author display names. This makes it possible for authenticated...
CVE-2023-36337: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in the component /index.php/cuzh4 of PHP Inventory Management System 1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2025-12077: Improper Neutralization of Input During Web Page Generation
The WP to LinkedIn Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all versions up to, and including, 1.9.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-12076: Improper Neutralization of Input During Web Page Generation
The Social Media Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage parameter in all versions up to, and including, 3.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2025-13622: Improper Neutralization of Input During Web Page Generation
The Jabbernotification plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATHINFO in all versions up to, and including, 0.99-RC2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
CVE-2025-60646: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...
CVE-2025-12471: Improper Neutralization of Input During Web Page Generation
The Hubbub Lite – Fast, free social sharing and follow buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dpsplistattentionsearch' parameter in all versions up to, and including, 1.36.0 due to insufficient input sanitization and output escaping. This makes it...
CVE-2025-12017: Improper Neutralization of Input During Web Page Generation
The VNPAY Payment gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...
CVE-2020-36853: Improper Neutralization of Input During Web Page Generation
The 10WebMapBuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Plugin Settings Change in versions up to, and including, 1.0.63 due to insufficient input sanitization and output escaping and a lack of capability checks. This makes it possible for unauthenticated attacker...
EUVD-2021-24806
Malware in sbrugna...
EUVD-2021-21317
Malware in sbrugna...
EUVD-2021-17135
Malware in sbrugna...
EUVD-2020-23987
Malware in sbrugna...
EUVD-2021-25686
Malware in sbrugna...
EUVD-2020-21527
Malware in sbrugna...
EUVD-2020-15962
Malware in sbrugna...
EUVD-2021-21295
Malware in sbrugna...
EUVD-2020-11196
Malware in sbrugna...