WordPress plugin 코드엠샵 소셜톡 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress plugin WordPress Events Calendar Plugin – connectDaily 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WordPress Events Calendar...

PT-2025-36169

Name of the Vulnerable Software and Affected Versions Parallax Scrolling Enllax.js versions through 0.0.6 Description The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations Upda...

PT-2025-36175

Name of the Vulnerable Software and Affected Versions Tikolan FW Anker versions through 1.2.6 Description The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting XSS. Recommendations Update Tikolan FW Anker t...

WordPress plugin Easy Download Media Counter Cross Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

CVE-2024-13073 XSS in Akinsoft's TaskPano

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft TaskPano allows Cross-Site Scripting XSS. This issue affects TaskPano: s1.06.04...

CVE-2025-58596

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in properfraction MailOptin mailoptin allows Stored XSS.This issue affects MailOptin: from n/a through = 1.2.75.0...

CVE-2024-13064 XSS in Akinsoft's MyRezzta

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft MyRezzta allows Cross-Site Scripting XSS. This issue affects MyRezzta: from s2.02.02 before v2.05.01...

PT-2025-35701

Name of the Vulnerable Software and Affected Versions: Akinsoft MyRezzta versions s2.02.02 through v2.05.00 Description: Akinsoft MyRezzta is susceptible to a Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of...

PT-2025-35758

Name of the Vulnerable Software and Affected Versions: WP Flow Plus versions through 5.2.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update WP Flow Plus to a version...

WordPress plugin WP Flow Plus 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

CVE-2024-12972 XSS in Akinsoft's OctoCloud

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft OctoCloud allows Cross-Site Scripting XSS. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

CVE-2024-12914

CVE-2024-12914 concerns Akınsoft QR Menü. Connected sources confirm a Cross-Site Scripting (XSS) vulnerability affecting QR Menü versions s1.05.05 through 1.05.11, due to improper neutralization of input during web page generation. The issue is described across CNVD/CNNVD and PT-2025-35478 as an ...

CVE-2025-58197

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mra13 Simple Download Monitor simple-download-monitor allows Stored XSS.This issue affects Simple Download Monitor: from n/a through = 3.9.34...

CVE-2025-48319

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gslauraspeck Mesa Mesa Reservation Widget mesa-mesa-reservation-widget allows Stored XSS.This issue affects Mesa Mesa Reservation Widget: from n/a through = 1.0.0...

CVE-2025-48315

CVE-2025-48315 is a stored XSS vulnerability in the WordPress HTML plugin (versions

CVE-2025-58209

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rtCamp Transcoder transcoder allows Stored XSS.This issue affects Transcoder: from n/a through = 1.4.0...

CVE-2025-58195

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through = 1.4.17...

CVE-2025-58211 WordPress Chatbox Manager Plugin <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Stored XSS.This issue affects Chatbox Manager: from n/a through = 1.2.6...

CVE-2025-58208

The CVE-2025-58208 entry concerns a Stored Cross-Site Scripting (XSS) in the WordPress plugin PDF for Elementor Forms + Drag And Drop Template Builder (versions up to 6.2.0). The root cause is improper input neutralization during web page generation, enabling stored XSS to affect pages generated ...