PT-2025-4956

Name of the Vulnerable Software and Affected Versions ContentOptin Lite versions n/a through 1.1 Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject malicious scripts int...

PT-2025-5019

Name of the Vulnerable Software and Affected Versions NotFound Preloader Quotes versions n/a through 1.0.0 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means that an attacker...

CVE-2025-23630: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Irshad A.Khan Cyber Slider cyber-new-slider allows Reflected XSS.This issue affects Cyber Slider: from n/a through = 1.1...

CVE-2025-23610: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tehsmash Ultimate Events ultimate-events allows Reflected XSS.This issue affects Ultimate Events: from n/a through = 1.3.3...

CVE-2025-23548: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bilal TAS Responsivity responsivity allows Reflected XSS.This issue affects Responsivity: from n/a through = 0.0.6...

PT-2025-4974

Name of the Vulnerable Software and Affected Versions NotFound WH Cache & Security versions 1.1.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Reflected XSS. This means that an attacker can inject malicious code into...

CVE-2024-49666

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in reputeinfosystems ARPrice arprice allows SQL Injection.This issue affects ARPrice: from n/a through = 4.1.3...

CVE-2025-23454: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flashmaniac Nature FlipBook vertical-diamond-flipbook-flash allows Reflected XSS.This issue affects Nature FlipBook: from n/a through = 1.7...

CVE-2024-49700: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reputeinfosystems ARPrice arprice allows Reflected XSS.This issue affects ARPrice: from n/a through = 4.1.3...

CVE-2025-22709: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Soft8Soft LLC Verge3D verge3d allows Reflected XSS.This issue affects Verge3D: from n/a through = 4.8.0...

WordPress plugin Smart Manager SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

FortiSwitch Command Line Code Execution

The vulnerability of the command-line interface of microprogrammed Ethernet switch FortiSwitch exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2025-0530: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. This vulnerability affects unknown code of the file /parse/feedbacksystem.php. The manipulation of the argument type leads to cross site scripting. The attack can be initiated remotely. The exploit...

CVE-2025-23802

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SteveSoehl WP-Revive Adserver wp-revive-adserver allows Stored XSS.This issue affects WP-Revive Adserver: from n/a through = 2.2.1...

CVE-2025-23926

CVE-2025-23926 is a stored Cross-Site Scripting (XSS) vulnerability affecting the WordPress plugin Ajax WP Query Search Filter (versions up to 1.0.7). The issue arises from improper neutralization of user input during web page generation. Public data in the initial record show a CVSS v3.1 base sc...

CVE-2025-23863 WordPress Rollover Tab plugin <= 1.3.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sabaoh Rollover Tab rollover-tab allows Stored XSS.This issue affects Rollover Tab: from n/a through = 1.3.2...

PT-2025-5124

Name of the Vulnerable Software and Affected Versions Stop Comment Spam versions 0.5.3 and earlier Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS. Recommendations For versions 0.5.3...

PT-2025-5137

Name of the Vulnerable Software and Affected Versions Nikos M. Top Flash Embed versions 0.3.4 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

PT-2025-5159

Name of the Vulnerable Software and Affected Versions Anshi Solutions Category D3 Tree versions n/a through 1.1 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. Recommendations For...

PT-2025-5091

Name of the Vulnerable Software and Affected Versions RocaPress Horizontal Line Shortcode versions n/a through 1.0 Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means an attacker can inject...