11197 matches found
PT-2025-39592
Name of the Vulnerable Software and Affected Versions Notely versions through 1.8.0 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means an attacker could potentially inject malicious...
PT-2025-39615
Name of the Vulnerable Software and Affected Versions rozx Recaptcha – wp versions through 0.2.6 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-Site Scripting XSS. This means that malicious scripts can be...
PT-2025-39589
Name of the Vulnerable Software and Affected Versions Amit Verma Map Categories to Pages versions through 1.3.2 Description The software contains a flaw due to improper handling of user-supplied data during web page creation, leading to a potential Cross-site Scripting XSS issue. This specific...
PT-2025-39600
Name of the Vulnerable Software and Affected Versions webmaniabr Nota Fiscal Eletrônica WooCommerce versions through 3.4.0.6 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting issue. This allows for Stored...
WordPress plugin User Notes 跨站脚本漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...
PT-2025-39532
Name of the Vulnerable Software and Affected Versions Quantities and Units for WooCommerce versions through 1.0.13 Description A flaw exists in Nick Verwymeren Quantities and Units for WooCommerce that allows for Stored Cross-site Scripting XSS. This issue arises from improper neutralization of...
PT-2025-39616
Name of the Vulnerable Software and Affected Versions Space Studio Click & Tweet versions through 0.8.9 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to Cross-site Scripting XSS. This specific instance is a...
Webbeyaz Website Software 跨站脚本漏洞
Webbeyaz Website Software is a platform for building websites from the Turkish company Webbeyaz. A cross-site scripting vulnerability exists in Webbeyaz Website Software version 2025.07.14 and earlier, which stems from improper input neutralization during web page generation and could lead to...
WordPress plugin SKT Blocks 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
TOTOLINK X6000R Improper Input Validation Vulnerability
TOTOLINK X6000R is a Wi-Fi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK, featuring high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from an improper input validation vulnerability that originates from the program's failure to...
PT-2025-39581
Name of the Vulnerable Software and Affected Versions SKT Blocks versions through 2.5 Description The software contains a flaw related to improper handling of user-supplied data during the creation of web pages, which can lead to Stored Cross-site Scripting XSS. This allows an attacker to inject...
PT-2025-39578
Name of the Vulnerable Software and Affected Versions DJ-Extensions.com PE Easy Slider versions through 1.1.0 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to Stored Cross-site Scripting XSS. This allows an...
PT-2025-39618
Name of the Vulnerable Software and Affected Versions Terry L. SEO Search Permalink versions through 1.0.3 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Stored Cross-site Scripting XSS. This means an...
PT-2025-39551
Name of the Vulnerable Software and Affected Versions Jordy Meow Gallery Custom Links versions through 2.2.5 Description The software contains a flaw due to improper handling of input during the creation of web pages, leading to a Cross-site Scripting XSS issue. This specific instance allows for...
CVE-2025-52907
Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360B20241207...
Improper Validation of Syntactic Correctness of Input
Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the torch.Tensor.random function when a model is compiled with Inductor. An attacker can cause the application to crash or become unresponsive by triggering a syntax error...
CVE-2025-40836
Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges...
CVE-2025-40836 Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability
Ericsson Indoor Connect 8855 contains an improper input validation vulnerability which if exploited can allow an attacker to execute commands with escalated privileges...
CVE-2025-40836
Summary: CVE-2025-40836 affects Ericsson Indoor Connect 8855 with an improper input validation vulnerability that could allow an attacker to execute commands with escalated privileges. Multiple sources (NVD, Red Hat, CVE lists, industry feeds) confirm the vulnerability title and potential impact....