11270 matches found
WordPress plugin Blog Designer PRO 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-36762
Name of the Vulnerable Software and Affected Versions: villatheme WooCommerce Photo Reviews versions through 1.3.13 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, also known as Cross-site Scripting. Recommendations: Update villatheme...
PT-2025-36928
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: This issue involves improper neutralization of input during web page generation, potentially leading to Cross-site Scripting XSS. XSS occurs when an applicati...
Improper Input Validation
@anthropic-ai/claude-code is vulnerable to improper input validation. The vulnerability is due to an overly broad allowlist of safe commands, which allows an attacker to bypass confirmation prompts, read file contents, and exfiltrate them over the network without user confirmation...
Cross-Site Scripting (XSS)
Bootstrap is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper neutralization of user input during web page generation, which allows an attacker to inject malicious scripts into the application...
appRain CMF cross-site scripting vulnerability (CNVD-2025-21119)
appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF due to improper validation of user input in the /apprain/developer/addons/update/cycle endpoint. An attacker could use this vulnerability to steal a victim's cookie-based authentication...
appRain CMF cross-site scripting vulnerability (CNVD-2025-21121)
appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF due to improper validation of user input on the /apprain/developer/addons/update/hysontable endpoint. An attacker could use this vulnerability to steal the victim's cookie-based authenticatio...
appRain CMF cross-site scripting vulnerability (CNVD-2025-21117)
appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF due to improper validation of user input in the /apprain/developer/addons/update/canvasjs endpoint. An attacker could use this vulnerability to steal the victim's cookie-based authentication...
CVE-2025-58832
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Search by Google search-google allows Stored XSS.This issue affects Search by Google: from n/a through = 1.9...
CVE-2025-58814
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ram Ratan Maurya Stagtools stagtools allows Stored XSS.This issue affects Stagtools: from n/a through = 2.3.8...
CVE-2025-58874
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in josepsitjar StoryMap wp-storymap allows DOM-Based XSS.This issue affects StoryMap: from n/a through = 2.1...
CVE-2025-58835
Improper Validation of Specified Quantity in Input vulnerability in calliko Bonus for Woo bonus-for-woo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bonus for Woo: from n/a through = 7.6.6...
CVE-2025-58822
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mndpsingh287 WP Mail wp-mail allows DOM-Based XSS.This issue affects WP Mail: from n/a through = 1.3...
CVE-2025-58851
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DigitalCourt Boxed Content boxed-content allows Stored XSS.This issue affects Boxed Content: from n/a through = 1.0...
CVE-2025-58886
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tan Nguyen Instant Locations instant-locations allows Stored XSS.This issue affects Instant Locations: from n/a through = 1.0...
CVE-2025-48526
In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profile due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is no...
CVE-2025-48537
In multiple locations, there is a possible way to persistently DoS the device due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-36352
Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or denial of service...
