CVE-2025-39509

The CVE-2025-39509 entry concerns ThemeNcode TNC FlipBook for WordPress (TNC FlipBook) with stored XSS in the web page generation input handling. Affected versions are up to and including 12.1.0 (and earlier). The root cause is improper input neutralization during page generation, enabling stored...

CVE-2025-47522

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AWEOS GmbH AWEOS WP Lock aweos-wp-lock allows Stored XSS.This issue affects AWEOS WP Lock: from n/a through = 1.4.8...

CVE-2025-47449

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jordy Meow Meow Gallery meow-gallery allows Stored XSS.This issue affects Meow Gallery: from n/a through = 5.2.7...

CVE-2025-47482

CVE-2025-47482 describes a stored XSS in the WordPress plugin SKT Skill Bar (vulnerable: n/a through 2.4). The root cause is Improper Neutralization of Input During Web Page Generation (XSS). Affected product: SKT Skill Bar. The CVE entry is corroborated by multiple sources (NVD/NIST and CVE List...

CVE-2025-32566

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashraful Sarkar Naiem License For Envato license-envato allows Reflected XSS.This issue affects License For Envato: from n/a through = 1.0.0...

CVE-2025-23448

The CVE-2025-23448 entry concerns the WordPress visualslider Sldier plugin (versions n/a through 1.1.1) and is caused by improper neutralization of input during web page generation, leading to a Reflected XSS vulnerability. Multiple connected sources (NVD, Red Hat, CVE List, CVE enrichment) confi...

CVE-2025-31864

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Out the Box Beam me up Scotty beam-me-up-scotty allows Stored XSS.This issue affects Beam me up Scotty: from n/a through = 1.0.23...

CVE-2025-31738

CVE-2025-31738: LeadQuizzes for WordPress suffers a stored cross-site scripting (XSS) vulnerability (Authenticated, Contributor+). Affected versions: LeadQuizzes

CVE-2025-31556

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This issue affects IMPress for IDX Broker: from n/a through = 3.2.3...

CVE-2025-26579

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in videowhisper MicroPayments paid-membership allows Reflected XSS.This issue affects MicroPayments: from n/a through = 3.2.4...

CVE-2025-27279

CVE-2025-27279 is a Reflected XSS in the WordPress Flashfader plugin (affected: NotFound Flashfader; versions up to and including 1.1.1). It arises from improper input neutralization during web page generation, enabling reflected cross-site scripting. Public records in the connected documents ide...

CVE-2025-23468

CVE-2025-23468 affects WordPress plugin NotFound Essay Wizard (wpCRES) versions up to and including 1.0.6.4. The issue is a Reflected Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. Affected component: wpCRES plugin for Essay Wizard; vulnerable versi...

CVE-2025-23790

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wassereimer Easy Code Placement allows Reflected XSS. This issue affects Easy Code Placement: from n/a through 18.11...

CVE-2024-49664

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in chatplusjp chatplusjp chatplusjp allows Reflected XSS.This issue affects chatplusjp: from n/a through = 1.02...

WordPress plugin WP24 Domain Check 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin ThriveDesk 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-23676

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shawfactor LH Email lh-email allows Reflected XSS.This issue affects LH Email: from n/a through = 1.12...

WordPress plugin Magazine Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

The vulnerability of the module that summarizes the Workflow framework for scanning vulnerabilities in Osmedeus, allowing attackers to perform cross-site scripting attacks

The vulnerability of the Workflow framework’s module summary component is related to the failure to remove specific elements from web pages when generating reports based on the general-template.md template. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting...

CVE-2024-54260

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blazethemes News Kit Elementor Addons news-kit-elementor-addons allows Stored XSS.This issue affects News Kit Elementor Addons: from n/a through = 1.4.2...