PT-2025-9375

Name of the Vulnerable Software and Affected Versions WP FixTag versions through v2.0.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations For versions through...

PT-2025-9473

Name of the Vulnerable Software and Affected Versions s2Member Pro versions n/a through 241216 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations For versions n...

PT-2025-9329

Name of the Vulnerable Software and Affected Versions NotFound ntp-header-images versions 1.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For versio...

PT-2025-9405

Name of the Vulnerable Software and Affected Versions Easy School Registration versions 3.9.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions 3.9.8...

PT-2025-9377

Name of the Vulnerable Software and Affected Versions WP Social Links versions 0.3.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For WP Social Links version...

PT-2025-9378

Name of the Vulnerable Software and Affected Versions DX Sales CRM versions 1.1 and earlier Description The issue affects the DX Sales CRM, allowing for Reflected XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting attacks. Recommendations...

WordPress plugin uListing SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

PT-2025-9381

Name of the Vulnerable Software and Affected Versions Pin Locations on Map versions n/a through 1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS in Pin Locations on Map...

PT-2025-9340

Name of the Vulnerable Software and Affected Versions Flexo Slider versions 1.0013 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For Flexo Slider...

PT-2025-9396

Name of the Vulnerable Software and Affected Versions Cobwebo URL Plugin versions 1.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in the Cobwebo URL Plugin. Recommendations...

PT-2025-9407

Name of the Vulnerable Software and Affected Versions DN Sitemap Control versions 1.0.6 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in the DN Sitemap Control. Recommendation...

PT-2025-9344

Name of the Vulnerable Software and Affected Versions RSVP ME versions n/a through 1.9.9 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For versions n/a throug...

PT-2025-9498

Name of the Vulnerable Software and Affected Versions NotFound Flashfader versions 1.1.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it allows for Reflected XSS...

PT-2025-9372

Name of the Vulnerable Software and Affected Versions Ui Slider Filter By Price versions n/a through 1.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For versions n/...

PT-2025-9373

Name of the Vulnerable Software and Affected Versions Push Envoy Notifications versions 1.0.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in Push Envoy Notifications...

PT-2025-9351

Name of the Vulnerable Software and Affected Versions Browser-Update-Notify versions 0.2.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS attacks. Recommendations For versions...

PT-2025-9364

Name of the Vulnerable Software and Affected Versions ClickBank Storefront versions 1.7 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For ClickBank Storefront...

CVE-2025-25119: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alejandro Aranda Woocommerce osCommerce Sync woo-oscommerce-sync allows Reflected XSS.This issue affects Woocommerce osCommerce Sync: from n/a through = 2.0.20...

CVE-2025-25108: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shalomworld SW Plus shalom-world-media-gallery allows Reflected XSS.This issue affects SW Plus: from n/a through = 2.1...

CVE-2025-23716: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JkmAS Login Watchdog login-watchdog allows Stored XSS.This issue affects Login Watchdog: from n/a through = 1.0.4...