5 matches found
EUVD-2025-3375
Malicious code in bioql PyPI...
CVE-2025-23729
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fures XTRA Settings xtra-settings allows Reflected XSS.This issue affects XTRA Settings: from n/a through = 2.1.8...
CVE-2025-23729
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fures XTRA Settings xtra-settings allows Reflected XSS.This issue affects XTRA Settings: from n/a through = 2.1.8...
CVE-2025-23729
Technical details beyond the initial description are not provided in the connected documents. The CVE-2025-23729 entry describes a Reflected XSS in XTRA Settings (WordPress) affecting versions up to 2.1.8; monitor for official advisories and patches.
PT-2025-5054 · Unknown · Fures Xtra Settings
Name of the Vulnerable Software and Affected Versions: fures XTRA Settings versions n/a through 2.1.8 Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected XSS. This means that an attacker can inject malicious scripts into the...