PT-2025-36175

Name of the Vulnerable Software and Affected Versions Tikolan FW Anker versions through 1.2.6 Description The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting XSS. Recommendations Update Tikolan FW Anker t...

CVE-2025-58863: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SdeWijs Zoomify embed for WP zoom-image-shortcode allows Stored XSS.This issue affects Zoomify embed for WP: from n/a through = 1.5.2...

PT-2025-36133

Name of the Vulnerable Software and Affected Versions WPBean WPB Elementor Addons versions through 1.6 Description The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting XSS. Recommendations Update WPBean WP...

PT-2025-36222

Name of the Vulnerable Software and Affected Versions: Tan Nguyen Instant Locations versions through 1.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: At the moment, there...

PT-2025-36130

Name of the Vulnerable Software and Affected Versions: WPKube Kiwi versions through 2.1.8 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update WPKube Kiwi to a version lat...

PT-2025-36221

Name of the Vulnerable Software and Affected Versions: Ivan Drago vipdrv versions through 1.0.3 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Ivan Drago vipdrv to a...

PT-2025-36179

Name of the Vulnerable Software and Affected Versions Ibnul H. Custom Team Manager versions through 2.4.2 Description The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting XSS. Recommendations Update Ibnul ...

CVE-2025-53307: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beaver Builder WordPress Assistant assistant allows Reflected XSS.This issue affects WordPress Assistant: from n/a through = 1.5.2...

PT-2025-36202

Name of the Vulnerable Software and Affected Versions: SdeWijs Zoomify embed for WP versions through 1.5.2 Description: The software contains a Stored Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicious...

PT-2025-36242

Name of the Vulnerable Software and Affected Versions: GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership versions n/a through 1.6.6 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for...

PT-2025-36160

Name of the Vulnerable Software and Affected Versions: wpdever WP Notification Bell versions through 1.4.5 Description: The software contains a Stored Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update wpdever WP Notification...

PT-2025-36248

Name of the Vulnerable Software and Affected Versions: Brent Jett Assistant versions through 1.5.2 Description: The software contains a Reflected Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update Brent Jett Assistant to a...

PT-2025-36398

Name of the Vulnerable Software and Affected Versions xgrammar versions 0.1.23 Description xgrammar is an open-source library for efficient, flexible, and portable structured generation. A grammar optimizer introduced in version 0.1.23 can be exploited to cause a denial-of-service DOS attack on...

CVE-2025-10027: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in itsourcecode POS Point of Sale System 1.0. Affected by this issue is some unknown functionality of the file /inventory/main/vendors/datatables/unittesting/templates/2512.php. This manipulation of the argument scripts causes cross site scripting. The attack can be...

PT-2025-36131

Name of the Vulnerable Software and Affected Versions: Arjan Olsder SEO Auto Linker versions through 1.5.3 Description: The software contains a cross-site scripting XSS vulnerability due to improper neutralization of input during web page generation. This allows for stored XSS attacks...

PT-2025-36212

Name of the Vulnerable Software and Affected Versions pusheco Pushe Web Push Notification versions through 0.5.0 Description The software contains a cross-site scripting XSS vulnerability due to improper neutralization of input during web page generation. This allows for stored XSS attacks...

CVE-2025-58827: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in PickPlugins Job Board Manager job-board-manager allows Code Injection.This issue affects Job Board Manager: from n/a through = 2.1.61...

PT-2025-36162

Name of the Vulnerable Software and Affected Versions: The African Boss Get Cash versions through 3.2.2 Description: The African Boss Get Cash is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks...

CVE-2025-58786: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VW THEMES Ibtana – Ecommerce Product Addons ibtana-ecommerce-product-addons allows DOM-Based XSS.This issue affects Ibtana – Ecommerce Product Addons: from n/a through = 0.4.7.6...

PT-2025-36302

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference issue was identified in the Linux kernel related to the iris driver. A warning from smatch indicated a potential null pointer dereference within the iris hfi...