CVE-2025-23647: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ariagle WP-Clap wp-clap allows Reflected XSS.This issue affects WP-Clap: from n/a through = 1.5...

PT-2025-6992 · WordPress · Ariagle Wp-Clap

Name of the Vulnerable Software and Affected Versions: Ariagle WP-Clap versions 1.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

WordPress plugin WP-Clap 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

WordPress WP-Clap plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin WP-Clap versions = 1.5...

clap-clap.ocnk.net Cross Site Scripting vulnerability OBB-3810211

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

RUSTSEC-2022-0104 `structopt` is in maintenance mode

structopt has been in maintenance mode, with no new development planned, since at least February of 2022. The status of structopt is discussed in a pinned issue. Recommended alternative The structopt derive wrapper was incorporated into clap v3. There is a migration guideclap-migration for...

WordPress Claptastic clap! Button plugin has multiple cross-site scripting vulnerabilities

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.Claptastic clap! Button is one of the button plugins that selects everyone's favorite content by readers clicking on different buttons. WordPress Claptastic clap! Button plugin version 1.3 has multiple cross-si...

Flashlight on Clap - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Flashlight on Clap published at the 'play' market has multiple vulnerabilities...

WordPress Claptastic clap! Button Plugin <= 1.3 - Cross Site Scripting (XSS)

This plugin is prone to a cross site scripting vulnerability, because it fails to sufficiently sanitize user-supplied input. Solution Update the plugin...

WordPress Claptastic clap! Button Plugin <= 1.3 - Cross Site Scripting (XSS)

This plugin is prone to a cross site scripting vulnerability, because it fails to sufficiently sanitize user-supplied input. Solution Update the plugin...

Claptastic clap! Button <= 1.3 - Authenticated Cross-Site Scripting (XSS)

The claptastic-clap-button WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

WordPress Claptastic Clap! Button 1.3 Cross Site Scripting

Product: Claptastic clap! Button Exploit Author: Sachin Wagh Version: 1.3 Home page Link: https://wordpress.org/plugins/claptastic-clap-button/ ============================================================================ Details: The Claptastic clap! Button plugin for WordPress is prone to a...