PT-2025-13188

Name of the Vulnerable Software and Affected Versions Repute Infosystems ARPrice versions n/a through 4.1.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For...

PT-2025-13267

Name of the Vulnerable Software and Affected Versions Notif Bell versions 0.9.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For versions 0.9.8 a...

PT-2025-13235

Name of the Vulnerable Software and Affected Versions kendysond Payment Forms for Paystack versions n/a through 4.0.1 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-13148

Name of the Vulnerable Software and Affected Versions Mahdi Yousefi افزونه حمل و نقل ووکامرس پست پیشتاز و سفارشی، پیک موتوری versions through 4.2.3 Description The issue affects the Mahdi Yousefi افزونه حمل و نقل ووکامرس پست پیشتاز و سفارشی، پیک موتوری plugin, allowing Stored XSS due to improper...

CVE-2025-30780: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cubecolour Audio Album audio-album allows Stored XSS.This issue affects Audio Album: from n/a through = 1.5.0...

PT-2025-13061

Name of the Vulnerable Software and Affected Versions webvitaly Sitekit versions 1.8 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

CVE-2025-30813: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in listamester Listamester listamester allows Stored XSS.This issue affects Listamester: from n/a through = 2.3.5...

CVE-2024-9103

Improper Neutralization of Script in Attributes in a Web Page vulnerability in Forcepoint Email Security Blocked Messages module allows Stored XSS. This issue affects Email Security through 8.5.5...

CVE-2025-30573

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mrdenny My Default Post Content my-default-post-content allows Stored XSS.This issue affects My Default Post Content: from n/a through = 0.7.3...

CVE-2025-30524

CVE-2025-30524 corresponds to an SQL injection vulnerability in the WordPress Product Catalog (DisplayProduct/Product Catalog). Affected versions are from n/a through 1.0.4. The issue is an improper neutralization of input in SQL commands. Connected sources indicate the vulnerability is currently...

CVE-2025-28935

CVE-2025-28935 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin FancyBox Plus up to version 1.0.1 . The issue is described as an improper neutralization of input during web page generation, enabling reflected XSS attempts. The connected documents provide the same de...

PT-2025-12935

Name of the Vulnerable Software and Affected Versions Accounting for WooCommerce versions 1.6.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For...

PT-2025-12926

Name of the Vulnerable Software and Affected Versions videowhisper MicroPayments versions n/a through 3.1.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions n/a...

PT-2025-12944

Name of the Vulnerable Software and Affected Versions Teleport versions 1.2.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicio...

CVE-2025-23543: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fomopay FOMO Pay Chinese Payment Solution fomo-payment-gateway-for-woocommerce allows Reflected XSS.This issue affects FOMO Pay Chinese Payment Solution: from n/a through = 2.0.4...

PT-2025-12934

Name of the Vulnerable Software and Affected Versions Bastien Ho Event post versions n/a through 5.9.8 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the Event post. Recommendations...

PT-2025-12954

Name of the Vulnerable Software and Affected Versions NotFound Lightview Plus versions 3.1.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For versions...

PT-2025-12951

Name of the Vulnerable Software and Affected Versions Omnify versions n/a through 2.0.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS, which can be exploited by attackers...

PT-2025-12902

Name of the Vulnerable Software and Affected Versions Narnoo Operator versions n/a through 2.0.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS in Narnoo Operator. Recommendations Fo...

PT-2025-12964

Name of the Vulnerable Software and Affected Versions Are you robot google recaptcha for wordpress versions n/a through 2.2 Description The issue affects the Are you robot google recaptcha for wordpress plugin, allowing Reflected XSS due to improper neutralization of input during web page...