Lucene search
K

4 matches found

NVD
NVD
added 2025/03/26 3:16 p.m.19 views

CVE-2025-28935

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in puzich Fancybox Plus fancybox-plus allows Reflected XSS.This issue affects Fancybox Plus: from n/a through = 1.0.1...

7.1CVSS0.00294EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/26 2:24 p.m.17 views

CVE-2025-28935 WordPress Fancybox Plus plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in puzich Fancybox Plus fancybox-plus allows Reflected XSS.This issue affects Fancybox Plus: from n/a through = 1.0.1...

7.1CVSS0.00294EPSS
Exploits0References1
CVE
CVE
added 2025/03/26 2:24 p.m.62 views

CVE-2025-28935

CVE-2025-28935 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin FancyBox Plus up to version 1.0.1 . The issue is described as an improper neutralization of input during web page generation, enabling reflected XSS attempts. The connected documents provide the same de...

7.1CVSS7.2AI score0.00294EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/26 2:24 p.m.8 views

CVE-2025-28935 WordPress Fancybox Plus plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in puzich Fancybox Plus fancybox-plus allows Reflected XSS.This issue affects Fancybox Plus: from n/a through = 1.0.1...

7.1CVSS8.6AI score0.00294EPSS
Exploits0References1
Rows per page
Query Builder