Lucene search
+L

22 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:41 p.m.•19 views

CVE-2025-15654

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fox-themes Prague allows Reflected XSS. This issue affects Prague: from n/a through 2.2.8...

7.1CVSS5.4AI score0.00146EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/03 9:16 a.m.•25 views

CVE-2025-15654

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fox-themes Prague allows Reflected XSS. This issue affects Prague: from n/a through 2.2.8...

7.1CVSS0.00146EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/03 8:55 a.m.•26 views

EUVD-2025-210045

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fox-themes Prague allows Reflected XSS. This issue affects Prague: from n/a through 2.2.8...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/03 8:55 a.m.•10 views

CVE-2025-15654

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fox-themes Prague allows Reflected XSS. This issue affects Prague: from n/a through 2.2.8...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/03 12:00 a.m.•1 views

CVE-2025-15654: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fox-themes Prague allows Reflected XSS. This issue affects Prague: from n/a through 2.2.8...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/03 12:00 a.m.•28 views

PT-2026-45905

Name of the Vulnerable Software and Affected Versions Fox-themes Prague versions prior to 2.2.9 Description Improper neutralization of input during web page generation allows Reflected Cross-site Scripting XSS, a flaw where an application includes untrusted data in a web page without proper...

7.1CVSS5.9AI score0.00146EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/03/06 7:54 a.m.•16 views

CVE-2026-27359

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Awa Plugins awa-plugins allows Reflected XSS.This issue affects Awa Plugins: from n/a through = 1.4.4...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/05 6:30 a.m.•17 views

EUVD-2026-9622

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Awa Plugins awa-plugins allows Reflected XSS.This issue affects Awa Plugins: from n/a through = 1.4.4...

5.9AI score0.00251EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/05 6:16 a.m.•15 views

CVE-2026-27359

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Awa Plugins awa-plugins allows Reflected XSS.This issue affects Awa Plugins: from n/a through = 1.4.4...

7.1CVSS0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/05 12:00 a.m.•0 views

CVE-2026-27359: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Awa Plugins awa-plugins allows Reflected XSS.This issue affects Awa Plugins: from n/a through = 1.4.4...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/05 12:00 a.m.•22 views

PT-2026-23243

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Awa Plugins awa-plugins allows Reflected XSS.This issue affects Awa Plugins: from n/a through = 1.4.4...

5.9AI score0.00251EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/02/21 7:30 p.m.•15 views

CVE-2025-67972

Missing Authorization vulnerability in Zoho Mail Zoho ZeptoMail allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zoho ZeptoMail: from n/a through 3.2.9...

4.3CVSS5.8AI score0.00318EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/21 7:29 p.m.•15 views

CVE-2026-24948

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through = 1.2.2...

7.1CVSS5.5AI score0.00156EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/20 4:22 p.m.•22 views

CVE-2026-24955

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Whizz Plugins whizz-plugins allows Reflected XSS.This issue affects Whizz Plugins: from n/a through = 1.9...

7.1CVSS0.00199EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/20 4:22 p.m.•23 views

CVE-2026-24948

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through = 1.2.2...

7.1CVSS0.00156EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/20 4:22 p.m.•13 views

CVE-2025-67972

Missing Authorization vulnerability in Zoho Mail Zoho ZeptoMail allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zoho ZeptoMail: from n/a through 3.2.9...

4.3CVSS0.00318EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/20 3:47 p.m.•11 views

CVE-2026-24948

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Reflector reflector-plugins allows Reflected XSS.This issue affects Reflector: from n/a through = 1.2.2...

7.1CVSS5.4AI score0.00156EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/20 3:47 p.m.•10 views

CVE-2026-24955

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Whizz Plugins whizz-plugins allows Reflected XSS.This issue affects Whizz Plugins: from n/a through = 1.9...

7.1CVSS5.4AI score0.00199EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•1 views

CVE-2026-24955: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Whizz Plugins whizz-plugins allows Reflected XSS.This issue affects Whizz Plugins: from n/a through = 1.9...

7.1CVSS5.8AI score0.00199EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•23 views

PT-2026-21046

Name of the Vulnerable Software and Affected Versions Prague versions through 2.2.8 Description A Reflected Cross-site Scripting XSS issue exists in the Prague prague-plugins component. This occurs due to improper neutralization of input during web page generation. The issue allows for the...

4.3CVSS5.5AI score0.00318EPSS
SaveExploits0References5
Rows per page
Query Builder