PT-2025-9442

Name of the Vulnerable Software and Affected Versions Woocommerce osCommerce Sync versions 2.0.20 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions...

PT-2025-9456

Name of the Vulnerable Software and Affected Versions Uncomplicated SEO versions 1.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions 1.2 and earlie...

PT-2025-9371

Name of the Vulnerable Software and Affected Versions Userbase Access Control versions 1.0 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it allows Reflected XSS...

PT-2025-9460

Name of the Vulnerable Software and Affected Versions Staff Directory Plugin: Company Directory versions through 4.3 Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-9469

Name of the Vulnerable Software and Affected Versions Events Planner versions 1.3.10 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For versions 1.3.10...

PT-2025-9438

Name of the Vulnerable Software and Affected Versions Implied Cookie Consent versions 1.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For Implied Cookie...

Apache Ranger 安全漏洞

Apache Ranger is a set of architectures from the Apache USA Foundation that implement comprehensive security measures for Hadoop clusters. The product provides centralized security policy management for core enterprise security requirements such as authorization, billing, and data protection. A...

PT-2025-9386

Name of the Vulnerable Software and Affected Versions Send to a Friend Addon versions 1.4.1 and earlier Description The issue affects the Send to a Friend Addon, allowing Reflected XSS due to improper neutralization of input during web page generation. This can lead to Cross-site Scripting...

PT-2025-9380

Name of the Vulnerable Software and Affected Versions DZS Ajaxer Lite versions 1.04 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. Recommendations For versions 1.04 and earlier,...

PT-2025-9327

Name of the Vulnerable Software and Affected Versions Marekkis Watermark versions 0.9.4 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it allows for Reflected XSS...

PT-2025-9482

Name of the Vulnerable Software and Affected Versions Zigaform – Form Builder Lite versions 7.4.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Stored XSS vulnerability. This allows for the storage of malicious script...

PT-2025-9475

Name of the Vulnerable Software and Affected Versions Bowo Variable Inspector versions n/a through 2.6.2 Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it allows Reflected XSS...

PT-2025-9428

Name of the Vulnerable Software and Affected Versions NotFound UniTimetable versions 1.1 and earlier Description The issue affects the UniTimetable, allowing for Stored XSS due to improper neutralization of input during web page generation. Recommendations For versions 1.1 and earlier, update to ...

PT-2025-9392

Name of the Vulnerable Software and Affected Versions 新淘客WordPress插件 versions 1.1.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For 新淘客WordPress插件 versions...

PT-2025-9376

Name of the Vulnerable Software and Affected Versions NotFound Wibstats versions 0.5.5 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS in NotFound Wibstats. Recommendation...

PT-2025-9497

Name of the Vulnerable Software and Affected Versions AcuGIS Leaflet Maps versions through 5.1.1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions through...

PT-2025-9338

Name of the Vulnerable Software and Affected Versions Vampire Character Manager versions n/a through 2.13 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS. Recommendations For versions...

PT-2025-9450

Name of the Vulnerable Software and Affected Versions ravi Singh Visitor Details versions n/a through 1.0.1 Description The issue is related to improper neutralization of input during web page generation, which leads to a Stored XSS vulnerability. This allows for the storage of malicious scripts...

PT-2025-9375

Name of the Vulnerable Software and Affected Versions WP FixTag versions through v2.0.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations For versions through...

PT-2025-9473

Name of the Vulnerable Software and Affected Versions s2Member Pro versions n/a through 241216 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations For versions n...