CVE-2025-26537: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rolomak GDPR Tools gdpr-tools allows Stored XSS.This issue affects GDPR Tools: from n/a through = 1.0.2...

CVE-2025-28924: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Simbul ZenphotoPress zenphotopress allows Reflected XSS.This issue affects ZenphotoPress: from n/a through = 1.8...

CVE-2025-23680: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Narnoo Narnoo Operator narnoo-shortcodes allows Reflected XSS.This issue affects Narnoo Operator: from n/a through = 2.0.0...

PT-2025-12821

Name of the Vulnerable Software and Affected Versions NS Simple Intro Loader versions 2.2.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it allows for Reflected X...

PT-2025-12808

Name of the Vulnerable Software and Affected Versions GhozyLab Gallery for Social Photo versions 1.0.0 through 1.0.0.35 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

CVE-2025-26742: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Gallery for Social Photo feed-instagram-lite allows Stored XSS.This issue affects Gallery for Social Photo: from n/a through = 1.0.0.35...

CVE-2025-30571

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in STEdb Corp. STEdb Forms stedb-forms allows SQL Injection.This issue affects STEdb Forms: from n/a through = 1.0.4...

CVE-2025-30553

CVE-2025-30553 (GMO Font Agent) : The GMO Font Agent WordPress plugin is affected up to version 1.6, with an authenticated Stored Cross-Site Scripting vulnerability (type: Cross-site Scripting via improper input neutralization during page generation). The issue can be triggered by an authenticate...

CVE-2025-30536: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in zeitwesentech Beautiful Link Preview beautiful-link-preview allows Stored XSS.This issue affects Beautiful Link Preview: from n/a through = 1.5.0...

PT-2025-12586

Name of the Vulnerable Software and Affected Versions gopiplus Message ticker versions n/a through 9.3 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject maliciou...

PT-2025-12645

Name of the Vulnerable Software and Affected Versions Easy Page Transition versions n/a through 1.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can injec...

PT-2025-12638

Name of the Vulnerable Software and Affected Versions WP Parallax Content Slider versions 0.9.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-12590

Name of the Vulnerable Software and Affected Versions Cristian Sarov Upload Quota per User versions 1.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can...

PT-2025-12620

Name of the Vulnerable Software and Affected Versions Arefly Login Redirect versions 1.0.0 through 1.0.5 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject...

PT-2025-12614

Name of the Vulnerable Software and Affected Versions Jahertor WP Featured Entries versions n/a through 1.0 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-12589

Name of the Vulnerable Software and Affected Versions Beautiful Link Preview versions 1.5.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-12583

Name of the Vulnerable Software and Affected Versions Atikul AI Preloader versions 1.0.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious...

PT-2025-12603

Name of the Vulnerable Software and Affected Versions GMO Font Agent versions 1.6 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For GMO Font Agent...

PT-2025-12601

Name of the Vulnerable Software and Affected Versions Pretty file links versions n/a through 0.9 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS in Pretty file links. Recommendations For...

PT-2025-12631

Name of the Vulnerable Software and Affected Versions Dourou Flickr set slideshows versions n/a through 0.9 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The...