PT-2025-38703

Name of the Vulnerable Software and Affected Versions Horato Internet Technologies Ind. And Trade Inc. Virtual Library Platform versions prior to 20.0 Description The software contains a flaw related to improper input handling during web page generation, potentially leading to Reflected Cross-sit...

PT-2025-39005

Name of the Vulnerable Software and Affected Versions BMI Adult & Kid Calculator versions through 1.2.2 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can b...

PT-2025-38896

Name of the Vulnerable Software and Affected Versions Bitly versions through 2.7.4 Description A flaw exists in Bitly that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The vulnerability could potentially allow an...

PT-2025-38876

Name of the Vulnerable Software and Affected Versions NGG Smart Image Search versions through 3.4.3 Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for the injection of malicious...

WordPress plugin Participants Database 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Slightly troublesome permalink cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38846

Name of the Vulnerable Software and Affected Versions Buckets versions through 0.3.9 Description The software contains a flaw related to improper input handling during web page generation, which can lead to Stored Cross-site Scripting XSS. This allows an attacker to inject malicious scripts into...

PT-2025-39055

Name of the Vulnerable Software and Affected Versions PenciDesign Penci Recipe versions through 4.0 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for the potential execution ...

PT-2025-39002

Name of the Vulnerable Software and Affected Versions CodeSolz Better Find and Replace versions through 1.7.6 Description The software contains a flaw related to improper input handling during web page generation, which can lead to Stored Cross-site Scripting XSS. This allows an attacker to injec...

WordPress plugin E-namad & Shamed Logo Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38874

Name of the Vulnerable Software and Affected Versions averta Master Slider versions through 3.11.0 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious code can be inject...

PT-2025-38830

Name of the Vulnerable Software and Affected Versions Safety Exit versions through 1.8.0 Description A flaw exists in Safety Exit that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. Successful exploitation could allow ...

PT-2025-39059

Name of the Vulnerable Software and Affected Versions PenciDesign Soledad versions through 8.6.8 Description A flaw exists in PenciDesign Soledad that allows for DOM-Based Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The vulnerability...

PT-2025-38960

Name of the Vulnerable Software and Affected Versions morganrichards Auction Feed versions through 1.1.3 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can ...

WordPress plugin xili-tidy-tags 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38950

Name of the Vulnerable Software and Affected Versions eZee Technosys eZee Online Hotel Booking Engine versions through 1.0.0 Description The eZee Online Hotel Booking Engine contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting XSS...

WordPress plugin Behance Portfolio Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

PT-2025-38958

Name of the Vulnerable Software and Affected Versions Modern Minds Magento 2 WordPress Integration versions through 1.4.1 Description The Modern Minds Magento 2 WordPress Integration software contains a flaw related to improper input handling during web page generation, specifically a Stored...

WordPress plugin Safety Exit 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the capability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38802

Name of the Vulnerable Software and Affected Versions icopydoc Maps for WP versions through 1.2.5 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting XSS. This allows an attacker to inject...