Lucene search
+L

11324 matches found

Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.13 views

PT-2025-54187

CVE-2025-63027 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webcreations907 WBC907 Core allows Stored XSS.This issue affects… https://t.co/zEwVaW4hYn...

6.5CVSS6.1AI score0.00138EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.14 views

WordPress plugin Web Directory Free 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS5.4AI score0.00138EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.14 views

WordPress plugin Appointify SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injectio...

7.6CVSS5.9AI score0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/29 11:50 p.m.40 views

CVE-2025-23550 WordPress Product Puller plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kemal YAZICI Product Puller product-puller allows Reflected XSS.This issue affects Product Puller: from n/a through = 1.5.1...

7.1CVSS0.00155EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/29 10:15 p.m.12 views

CVE-2025-68504

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetSearch jet-search allows DOM-Based XSS.This issue affects JetSearch: from n/a through = 3.5.16...

6.5CVSS0.00182EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/29 6:15 p.m.8 views

CVE-2025-55063

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS0.00151EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/29 6:15 p.m.12 views

CVE-2025-55062

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS0.00151EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/29 6:15 p.m.7 views

CVE-2025-55064

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS0.00151EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/29 5:23 p.m.7 views

EUVD-2025-205628

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.1AI score0.00151EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/29 5:19 p.m.10 views

EUVD-2025-205621

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.1AI score0.00151EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/29 5:19 p.m.4 views

CVE-2025-55063 Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.2AI score0.00151EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/29 5:19 p.m.17 views

CVE-2025-55063

CVE-2025-55063 is described across multiple sources as CWE-79: improper neutralization of input during web page generation, i.e., a Cross-site Scripting (XSS) vulnerability. The connected documents consistently identify XSS as the core issue (improper input neutralization) but do not provide prec...

4.8CVSS6.2AI score0.00151EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/29 5:18 p.m.35 views

CVE-2025-55062 Priority - CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS0.00151EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/29 5:18 p.m.12 views

EUVD-2025-205625

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

4.8CVSS6.1AI score0.00151EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/29 7:28 a.m.8 views

Security Bulletin: Vulnerability in cipher-base affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in cipher-base has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

9.1CVSS6.7AI score0.00504EPSS
SaveExploits1Affected Software2
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.8 views

Priority Web 跨站脚本漏洞

Priority Web is the Web side of an Enterprise Resource Planning system from Priority Israel. A cross-site scripting vulnerability exists in Priority Web that stems from improper input neutralization and could lead to a cross-site scripting attack...

4.8CVSS5.6AI score0.00151EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.13 views

Priority Web 跨站脚本漏洞

Priority Web is the Web side of an Enterprise Resource Planning system from Priority Israel. A cross-site scripting vulnerability exists in Priority Web that stems from improper input neutralization and could lead to a cross-site scripting attack...

4.8CVSS5.6AI score0.00151EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.8 views

ljharb qs 安全漏洞

ljharb qs is a query string parser with nesting support by Jordan Harband, an individual developer in the United States. A security vulnerability exists in ljharb qs versions prior to 6.14.1 that stems from improper input validation and could lead to an HTTP denial of service attack...

6.3CVSS6.8AI score0.00427EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.12 views

PT-2025-53770

Name of the Vulnerable Software and Affected Versions affected versions not specified Description The software suffers from an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for the injection of malicious scripts into web pages. Th...

4.8CVSS6.8AI score0.00151EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.9 views

PT-2025-53766

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The software is susceptible to a cross-site scripting XSS issue due to improper input neutralization during web page generation. This allows for the injection o...

4.8CVSS6AI score0.00151EPSS
SaveExploits0References4
Rows per page
Query Builder