CVE-2025-57947: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Photo Gallery by Ays gallery-photo-gallery allows DOM-Based XSS.This issue affects Photo Gallery by Ays: from n/a through = 6.3.8...

CVE-2025-59552: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pdfcrowd Dev Team Save as PDF save-as-pdf-by-pdfcrowd allows Stored XSS.This issue affects Save as PDF: from n/a through = 4.5.2...

CVE-2025-58026: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in termageddon Termageddon: Cookie Consent & Privacy Compliance termageddon-usercentrics allows Stored XSS.This issue affects Termageddon: Cookie Consent & Privacy Compliance: from n/a through = 1.8.1...

CVE-2025-57966: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Gallery Lightbox gallery-lightbox-slider allows Stored XSS.This issue affects Gallery Lightbox: from n/a through = 1.0.0.41...

CVE-2025-58673: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in weDevs WP User Frontend wp-user-frontend allows Code Injection.This issue affects WP User Frontend: from n/a through = 4.1.12...

CVE-2025-53463: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HT Plugins HT Mega – Absolute Addons for WPBakery Page Builder ht-mega-for-wpbakery allows DOM-Based XSS.This issue affects HT Mega – Absolute Addons for WPBakery Page Builder: from n/a through =...

Fedora 43 : perl-Catalyst-Authentication-Credential-HTTP (2025-6df5ab0b98)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-6df5ab0b98 advisory. This update upgrade the package to version 1.019. This version fixes CVE-2025-40920 by using Crypt::SysRandom to generate nonces instead of Data::UUID. Tenab...

PT-2025-38947

Name of the Vulnerable Software and Affected Versions Proof Factor – Social Proof Notifications versions through 1.0.5 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting XSS. This allows...

PT-2025-38909

Name of the Vulnerable Software and Affected Versions bestweblayout Portfolio versions through 2.58 Description The software contains a flaw related to improper input handling during web page generation, leading to a DOM-Based Cross-Site Scripting XSS issue. This allows for potential malicious co...

PT-2025-38831

Name of the Vulnerable Software and Affected Versions catchsquare WP Social Widget versions through 2.3.1 Description The WP Social Widget software contains a flaw related to improper input handling during web page generation, which can lead to Cross-site Scripting XSS. This allows for the...

PT-2025-39016

Name of the Vulnerable Software and Affected Versions epeken Epeken All Kurir versions through 2.0.2 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This can potentially allow an attacke...

CVE-2025-57959: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tmatsuur Slightly troublesome permalink slightly-troublesome-permalink allows Stored XSS.This issue affects Slightly troublesome permalink: from n/a through = 1.2.0...

PT-2025-39020

Name of the Vulnerable Software and Affected Versions AnyClip Luminous Studio versions through 1.3.3 Description The AnyClip Luminous Studio software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for th...

PT-2025-38780

Name of the Vulnerable Software and Affected Versions Double the Donation versions through 2.0.0 Description The Double the Donation software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious...

PT-2025-38813

Name of the Vulnerable Software and Affected Versions Zoho Billing versions through 4.1 Description A flaw exists in Zoho Billing that allows for DOM-Based Cross-site Scripting XSS. This issue arises from improper neutralization of input during web page generation. The vulnerability could...

PT-2025-38927

Name of the Vulnerable Software and Affected Versions artbees JupiterX Core versions through 4.10.1 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious code can be...

CVE-2025-59583: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Penci Filter Everything penci-filter-everything allows DOM-Based XSS.This issue affects Penci Filter Everything: from n/a through 1.7...

CVE-2025-58002: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Milan Petrovic GD bbPress Tools gd-bbpress-tools allows DOM-Based XSS.This issue affects GD bbPress Tools: from n/a through = 3.5.3...

PT-2025-38935

Name of the Vulnerable Software and Affected Versions chtombleson Mobi2Go versions through 1.0.0 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can be...

PT-2025-39008

Name of the Vulnerable Software and Affected Versions Jose Vega WP Frontend Admin versions through 1.22.6 Description The software contains a flaw related to improper input handling during web page generation, which can lead to Cross-site Scripting XSS. This allows for the injection of malicious...