WordPress plugin Bold Page Builder 跨站脚本漏洞

WordPress Bold Page Builder is a free and open source page builder plugin that allows users to quickly create custom page layouts through a drag and drop interface without writing code. WordPress Bold Page Builder suffers from a cross-site scripting vulnerability that originates from improper inp...

WordPress plugin Infility Global 跨站脚本漏洞

WordPress is a set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers, WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin Infility Global, which stems from improper...

org.jboss.hal:hal-console: Wildfly HAL Console Cross-Site Scripting

A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups...

org.jboss.hal:hal-console: Wildfly HAL Console Cross-Site Scripting

A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups...

WordPress Halpes Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Halpes, which stems from improper input neutralization and can be exploited by an attacker to tamper with web conte...

CVE-2025-6948 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that, under certain conditions, could have allowed a successful attacker to execute actions on behalf of users by injecting malicious content...

CVE-2025-6948

Summary: CVE-2025-6948 affects GitLab CE/EE releases prior to 17.11.6, 18.0.4, and 18.1.2. The issue is due to improper handling of input that, under certain conditions, could allow an attacker to execute actions on behalf of users by injecting malicious content (a cross-site scripting scenario)....

CVE-2025-53488

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - WikiHiero Extension allows Stored XSS.This issue affects Mediawiki - WikiHiero Extension: from 1.43.X before 1.43.2...

CVE-2025-53488 Stored XSS in WikiHiero

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - WikiHiero Extension allows Stored XSS.This issue affects Mediawiki - WikiHiero Extension: from 1.43.X before 1.43.2...

WordPress plugin Halpes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Halpes, which stems from improper input neutralization and can be exploited by an attacker to tamper with web conte...

Wikimedia Mediawiki - FlaggedRevs Extension 安全漏洞

Wikimedia Mediawiki - FlaggedRevs Extension is a Wikimedia Foundation extension for flagging and reviewing revisions. A security vulnerability exists in Wikimedia Mediawiki - FlaggedRevs Extension versions prior to 1.43.2, which stems from improper input neutralization and could lead to a...

Wikimedia Mediawiki - Quiz Extension 安全漏洞

Wikimedia Mediawiki - Quiz Extension is a quiz tool extension from the Wikimedia Foundation. A security vulnerability exists in Wikimedia Mediawiki - Quiz Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from improper input neutralization and could lead to...

Wikimedia Mediawiki - MediaSearch Extension 安全漏洞

Wikimedia Mediawiki - MediaSearch Extension is a Wikimedia Foundation extension for search. A security vulnerability exists in Wikimedia Mediawiki - MediaSearch Extension versions prior to 1.39.13 and prior to 1.43.2, which stems from improper input neutralization and could lead to a stored...

Wikimedia Mediawiki - WikiHiero Extension 安全漏洞

Wikimedia Mediawiki - WikiHiero Extension is a Wikimedia Foundation extension for displaying and editing ancient Egyptian hieroglyphics. A security vulnerability exists in Wikimedia Mediawiki - WikiHiero Extension versions prior to 1.43.2, which stems from improper input neutralization and could...

CVE-2025-49247

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cmoreira Team Showcase team-showcase-cm allows DOM-Based XSS.This issue affects Team Showcase: from n/a through 25.05.13...

CVE-2025-28957

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OwnerRez OwnerRez API ownerrez allows Stored XSS.This issue affects OwnerRez API: from n/a through = 1.2.1...

CVE-2025-52796

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tggfref WP-Recall allows Reflected XSS. This issue affects WP-Recall: from n/a through 16.26.14...

CVE-2025-52798

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eyecix JobSearch wp-jobsearch allows Reflected XSS.This issue affects JobSearch: from n/a through 3.0.6...

CVE-2025-31037

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in favethemes Homey homey allows Reflected XSS.This issue affects Homey: from n/a through = 2.4.5...

CVE-2025-28968

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vladimir Prelovac WP Wall wp-wall allows Reflected XSS.This issue affects WP Wall: from n/a through = 1.7.3...