PT-2025-13061

Name of the Vulnerable Software and Affected Versions webvitaly Sitekit versions 1.8 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

CVE-2025-30813: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in listamester Listamester listamester allows Stored XSS.This issue affects Listamester: from n/a through = 2.3.5...

CVE-2025-30818: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mlaza jAlbum Bridge jalbum-bridge allows DOM-Based XSS.This issue affects jAlbum Bridge: from n/a through = 2.0.17...

CVE-2025-26732: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in burgersoftware StoreBiz storebiz allows DOM-Based XSS.This issue affects StoreBiz: from n/a through = 1.0.32...

CVE-2025-22816: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codetrendy Power Mag power-mag allows DOM-Based XSS.This issue affects Power Mag: from n/a through = 1.1.5...

CVE-2025-30918: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gordon Böhme Structured Content structured-content allows Stored XSS.This issue affects Structured Content: from n/a through = 1.6.3...

CVE-2025-30763: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Olaf Lederer EO4WP fw-integration-for-emailoctopus allows Stored XSS.This issue affects EO4WP: from n/a through = 1.0.8.4...

CVE-2024-9103

Improper Neutralization of Script in Attributes in a Web Page vulnerability in Forcepoint Email Security Blocked Messages module allows Stored XSS. This issue affects Email Security through 8.5.5...

CVE-2025-30573

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mrdenny My Default Post Content my-default-post-content allows Stored XSS.This issue affects My Default Post Content: from n/a through = 0.7.3...

CVE-2025-30524

CVE-2025-30524 corresponds to an SQL injection vulnerability in the WordPress Product Catalog (DisplayProduct/Product Catalog). Affected versions are from n/a through 1.0.4. The issue is an improper neutralization of input in SQL commands. Connected sources indicate the vulnerability is currently...

CVE-2025-28935

CVE-2025-28935 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin FancyBox Plus up to version 1.0.1 . The issue is described as an improper neutralization of input during web page generation, enabling reflected XSS attempts. The connected documents provide the same de...

PT-2025-12935

Name of the Vulnerable Software and Affected Versions Accounting for WooCommerce versions 1.6.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For...

PT-2025-12926

Name of the Vulnerable Software and Affected Versions videowhisper MicroPayments versions n/a through 3.1.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations For versions n/a...

PT-2025-12944

Name of the Vulnerable Software and Affected Versions Teleport versions 1.2.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject malicio...

CVE-2025-23543: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fomopay FOMO Pay Chinese Payment Solution fomo-payment-gateway-for-woocommerce allows Reflected XSS.This issue affects FOMO Pay Chinese Payment Solution: from n/a through = 2.0.4...

PT-2025-12934

Name of the Vulnerable Software and Affected Versions Bastien Ho Event post versions n/a through 5.9.8 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in the Event post. Recommendations...

PT-2025-12954

Name of the Vulnerable Software and Affected Versions NotFound Lightview Plus versions 3.1.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations For versions...

PT-2025-12951

Name of the Vulnerable Software and Affected Versions Omnify versions n/a through 2.0.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS, which can be exploited by attackers...

PT-2025-12902

Name of the Vulnerable Software and Affected Versions Narnoo Operator versions n/a through 2.0.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Reflected XSS in Narnoo Operator. Recommendations Fo...

PT-2025-12964

Name of the Vulnerable Software and Affected Versions Are you robot google recaptcha for wordpress versions n/a through 2.2 Description The issue affects the Are you robot google recaptcha for wordpress plugin, allowing Reflected XSS due to improper neutralization of input during web page...