CVE-2025-23628

CVE-2025-23628: Reflected XSS in New Media One GeoDigs (GeoDigs) WordPress plugin; affects GeoDigs versions up to 3.4.1. Root cause: improper input neutralization during web page generation. CVSS v3.1 base score 7.1 (HIGH). Exploit details and remediation/version fixes are not provided in the sup...

CVE-2025-23624

CVE-2025-23624 is a Cross-Site Scripting vulnerability affecting the WordPress plugin WpDevTool by Alessandro Benoit. The issue is described as Improper Neutralization of Input During Web Page Generation (Reflected XSS) and affects WpDevTool versions from n/a up to 0.1.1. The CVSS v3.1 base score...

WordPress plugin Custom Coming Soon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

WordPress plugin Gallerio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...

WordPress plugin AZ Content Finder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Links/Problem Reporter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2025-4991 · Unknown · My Favorite Car

Name of the Vulnerable Software and Affected Versions: My Favorite Car versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This enables an attacker to inject malicious scrip...

Uyumsoft ERP 跨站脚本漏洞

Uyumsoft ERP is an ERP software from Uyumsoft Corporation. A cross-site scripting vulnerability exists in versions prior to Uyumsoft ERP Erp4.2109.166p45 that stems from improper input neutralization during web page generation...

PT-2025-4984 · Kumihimo · Kumihimo

Name of the Vulnerable Software and Affected Versions: Kumihimo versions n/a through 1.0.2 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows reflected XSS. This enables an attacker to inject malicio...

WordPress plugin GeoDigs 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-5132 · Unknown · Notfound Legal

Name of the Vulnerable Software and Affected Versions: NotFound Legal + versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This enables attackers to inject malicious script...

PT-2025-5055 · Unknown · Flx Dashboard Groups

Name of the Vulnerable Software and Affected Versions: FLX Dashboard Groups versions 0.0.0 through 0.0.7 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This means an attacker can inject malicio...

CVE-2025-23882

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in misanthrop WP Download Codes wp-download-codes allows Reflected XSS.This issue affects WP Download Codes: from n/a through = 2.5.4...

CVE-2025-23769

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dreamsofmatter Content Mirror content-mirror allows Reflected XSS.This issue affects Content Mirror: from n/a through = 1.2...

CVE-2025-23746

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Edem CMC MIGRATE cmc-migrate allows Reflected XSS.This issue affects CMC MIGRATE: from n/a through = 0.0.3...

CVE-2025-23674

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andygauk Bit.ly linker bitly-linker allows Reflected XSS.This issue affects Bit.ly linker: from n/a through = 1.1...

CVE-2025-23535

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in martinziegert REAL WordPress Sidebar drag-and-drop-custom-sidebar allows Stored XSS.This issue affects REAL WordPress Sidebar: from n/a through = 0.1...

CVE-2025-23500

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in faaiq Simple Custom post type custom field simple-content-construction-kit allows Reflected XSS.This issue affects Simple Custom post type custom field: from n/a through = 1.0.3...

CVE-2025-23746

CVE-2025-23746 is a reflected Cross‑Site Scripting issue in the CMC MIGRATE plugin for WordPress (NotFound) affecting versions up to 0.0.3. The connected Red Hat entry reiterates the description and target software (CMC MIGRATE) but does not provide concrete exploitation details or a published fi...

CVE-2025-23866 WordPress EU DSGVO Helper Plugin <= 1.0.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in E. Marten EU DSGVO Helper dsgvo allows Reflected XSS.This issue affects EU DSGVO Helper: from n/a through = 1.0.6.1...