6 matches found
GHSA-XVCM-6775-5M9R Immutable: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set
Summary Immutable.Map and Immutable.Set keep keys that share the same 32-bit hash in a collision bucket that is scanned linearly. The string hash is public and deterministic, so an attacker who controls the keys inserted into a Map can craft many keys that all collide, degrading insertion and...
CVE-2025-48095
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through = 5.1.8.8...
PT-2025-43160
Name of the Vulnerable Software and Affected Versions Ays Pro Survey Maker versions through 5.1.8.8 Description A flaw exists in Ays Pro Survey Maker that allows for Stored Cross-site Scripting XSS. This issue occurs due to improper neutralization of input during web page generation. Successful...
CVE-2025-24698
Cross-Site Request Forgery CSRF vulnerability in G5Theme Essential Real Estate allows Cross Site Request Forgery. This issue affects Essential Real Estate: from n/a through 5.1.8...
WordPress Poll Maker plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email Enumeration vulnerability
Missing Authorization to Unauthenticated Email Enumeration vulnerability discovered by Krzysztof Zając in WordPress Plugin Poll Maker versions = 5.1.8...