Cross-site Scripting (XSS)

Overview @sveltia/cms is a Sveltia CMS is a modern, lightweight, Git-based headless content management system. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the entry summary rendering process. An attacker can execute arbitrary JavaScript in the browser of users...

PT-2025-48647

Name of the Vulnerable Software and Affected Versions WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress versions up to and including 3.20.3 Description The WP Social Ninja plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate...