CVE-2025-8664

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities E-Municipality Management allows Cross-Site Scripting XSS. This issue affects StarCities E-Municipality Management: before 20250825...

CVE-2025-0419 XSS in Mikrogrup's Zirve Nova

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting XSS. This issue affects Zirve Nova: from 235 through 20250131...

CVE-2025-0419

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting XSS. This issue affects Zirve Nova: from 235 through 20250131...

CVE-2025-2404

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ubit Information Technologies STOYS allows Cross-Site Scripting XSS. This issue affects STOYS: from 2 before 20250916...

CVE-2025-2404 XSS in Ubit Information Technologies' STOYS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Ubit Information Technologies STOYS allows Cross-Site Scripting XSS. This issue affects STOYS: from 2 before 20250916...

CVE-2025-55054

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2025-55054

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2025-55054

CVE-2025-55054 is a CWE-79 Cross-site Scripting flaw: improper neutralization of input during web page generation leads to XSS. Connected data cites Baicells EG7035E-M11 (BaiCE_BM_2.5.26_NA) as affected, indicating a web-facing input handling weakness. The documents do not provide explicit exploi...

CVE-2025-58987 WordPress Football Pool Plugin <= 2.12.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AntoineH Football Pool football-pool allows Stored XSS.This issue affects Football Pool: from n/a through = 2.12.6...

PT-2025-36928

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: This issue involves improper neutralization of input during web page generation, potentially leading to Cross-site Scripting XSS. XSS occurs when an applicati...

PT-2025-36977

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a Cross-site Scripting XSS vulnerability. This issue could allow an attacker to inject unvalidated data, potentially leading to...

WordPress plugin WP Weixin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

WordPress plugin WooCommerce Photo Reviews 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

CVE-2025-43786: Improper Neutralization of Input During Web Page Generation

Enumeration of ERC from object entry in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 and 7.4 GA through update 92 allow attackers to determine existent ERC in the application by exploit t...

WordPress plugin Blog Designer PRO 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-58886

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tan Nguyen Instant Locations instant-locations allows Stored XSS.This issue affects Instant Locations: from n/a through = 1.0...

CVE-2025-58834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gugu short.io wp-shortcm allows DOM-Based XSS.This issue affects short.io: from n/a through = 2.4.2...

CVE-2025-58796

CVE-2025-58796 is a stored XSS in the WordPress plugin “Elementor Element Condition” (dudaster) affecting versions up to 1.0.5. The issue arises from improper input neutralization during web page generation, enabling script injection via crafted input. Public disclosures in multiple sources (incl...

PT-2025-36171

Name of the Vulnerable Software and Affected Versions: webvitaly Search by Google versions through 1.9 Description: The webvitaly Search by Google application contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS...

WordPress plugin Elementor Element Condition 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...