CVE-2025-3662

The CVE-2025-3662 entry concerns the WordPress FancyBox plugin (versions before 3.3.6). The root cause is that captions and titles attributes are not escaped before being used to populate galleries’ caption fields, enabling an Unauthenticated Stored XSS exploit. Affected product: FancyBox for Wor...

CVE-2023-52187

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Thomas Maier Image Source Control Lite – Show Image Credits and Captions.This issue affects Image Source Control Lite – Show Image Credits and Captions: from n/a through 2.17.0...

CVE-2025-25098

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zack Katz Links in Captions links-in-captions allows Stored XSS.This issue affects Links in Captions: from n/a through = 1.2...

CVE-2025-25098

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zack Katz Links in Captions links-in-captions allows Stored XSS.This issue affects Links in Captions: from n/a through = 1.2...

CVE-2025-25098

CVE-2025-25098 applies to the WordPress plugin Links in Captions (versions n/a through 1.2). The issue is a Stored Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Affects the Links in Captions component; exploitation could enable an att...

CVE-2025-25098 WordPress Links in Captions plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zack Katz Links in Captions allows Stored XSS. This issue affects Links in Captions: from n/a through 1.2...

CVE-2025-25098 WordPress Links in Captions plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Zack Katz Links in Captions links-in-captions allows Stored XSS.This issue affects Links in Captions: from n/a through = 1.2...

PT-2025-5930 · Unknown · Zack Katz Links In Captions

Name of the Vulnerable Software and Affected Versions: Zack Katz Links in Captions versions n/a through 1.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

WordPress plugin Links in Captions 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

CVE-2025-23889

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tormorten FooGallery Captions foogallery-captions allows Reflected XSS.This issue affects FooGallery Captions: from n/a through = 1.0.2...

WordPress Links in Captions plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin Links in Captions versions = 1.2...

CVE-2025-23889

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tormorten FooGallery Captions foogallery-captions allows Reflected XSS.This issue affects FooGallery Captions: from n/a through = 1.0.2...

CVE-2025-23889

CVE-2025-23889 is a Reflected XSS in the WordPress plugin FooGallery Captions. Affected versions are 1.0.2 and earlier; the issue arises from improper input neutralization during web page generation, enabling reflection-based script injection. The entry is corroborated by multiple sources (NVD/Re...

CVE-2025-23889 WordPress FooGallery Captions Plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tormorten FooGallery Captions foogallery-captions allows Reflected XSS.This issue affects FooGallery Captions: from n/a through = 1.0.2...

CVE-2025-23889 WordPress FooGallery Captions Plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tormorten FooGallery Captions foogallery-captions allows Reflected XSS.This issue affects FooGallery Captions: from n/a through = 1.0.2...

PT-2025-5172 · Unknown · Foogallery Captions

Name of the Vulnerable Software and Affected Versions: FooGallery Captions versions 1.0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows reflected cross-site scripting XSS. This enables attackers to inject malicious...

WordPress plugin FooGallery Captions 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress FooGallery Captions Plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin FooGallery Captions versions = 1.0.2...

gstreamer1-plugins-good: OOB-write in convert_to_s334_1a

A flaw was found in the GStreamer library. An out-of-bounds write in the MP4/MOV demuxer when handling CEA608 Closed Caption tracks can lead to crashes for certain input files. This vulnerability allows a malicious third party to trigger a crash of the application and perform code execution throu...

gstreamer1-plugins-good: OOB-write in convert_to_s334_1a

A flaw was found in the GStreamer library. An out-of-bounds write in the MP4/MOV demuxer when handling CEA608 Closed Caption tracks can lead to crashes for certain input files. This vulnerability allows a malicious third party to trigger a crash of the application and perform code execution throu...