PT-2025-38970

Name of the Vulnerable Software and Affected Versions Kama Click Counter versions through 4.0.4 Description A flaw exists in Kama Click Counter that allows for Stored Cross-site Scripting XSS. This issue arises from improper handling of user-supplied input during web page generation. The...

PT-2025-38896

Name of the Vulnerable Software and Affected Versions Bitly versions through 2.7.4 Description A flaw exists in Bitly that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The vulnerability could potentially allow an...

WordPress plugin Double the Donation 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

PT-2025-38780

Name of the Vulnerable Software and Affected Versions Double the Donation versions through 2.0.0 Description The Double the Donation software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious...

WordPress plugin WP Proposals 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

WordPress plugin Termageddon Cookie Consent and Privacy Compliance 跨站脚本漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A cross-site scripting vulnerability...

PT-2025-38875

Name of the Vulnerable Software and Affected Versions Termageddon versions through 1.8.1 Description The software contains a flaw related to improper input handling during web page creation, which can lead to Cross-site Scripting XSS. This specific instance is a Stored XSS issue. Recommendations...

PT-2025-38814

Name of the Vulnerable Software and Affected Versions photonicgnostic Library Bookshelves versions through 5.11 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, which can lead to Stored Cross-Site Scripting XSS. This allows an...

PT-2025-38813

Name of the Vulnerable Software and Affected Versions Zoho Billing versions through 4.1 Description A flaw exists in Zoho Billing that allows for DOM-Based Cross-site Scripting XSS. This issue arises from improper neutralization of input during web page generation. The vulnerability could...

WordPress plugin Buckets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Upsell Order Bump Offer for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...

WordPress plugin Adverts 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38937

Name of the Vulnerable Software and Affected Versions Nicu Micle Simple JWT Login versions through 3.6.4 Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for the injection of...

PT-2025-38920

Name of the Vulnerable Software and Affected Versions Verowa Connect versions through 3.2.3 Description A flaw exists in Picture-Planet GmbH Verowa Connect that allows for Stored Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The...

PT-2025-38917

Name of the Vulnerable Software and Affected Versions dtbaker StylePress for Elementor versions through 1.2.1 Description A flaw exists in dtbaker StylePress for Elementor that allows for Stored Cross-Site Scripting XSS. This issue arises from improper handling of user-supplied data during web pa...

PT-2025-38916

Name of the Vulnerable Software and Affected Versions Rameez Iqbal Real Estate Manager versions through 7.3 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-Site Scripting XSS issue. This allows for the potentia...

PT-2025-38944

Name of the Vulnerable Software and Affected Versions Category Featured Images versions through 1.1.8 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Cross-site Scripting issue. This allows for Stored XSS attacks. The...

WordPress plugin bestweblayout Portfolio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38933

Name of the Vulnerable Software and Affected Versions AnyClip Luminous Studio versions through 1.3.3 Description The AnyClip Luminous Studio software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for th...

PT-2025-38870

Name of the Vulnerable Software and Affected Versions Theater for WordPress versions through 0.18.8 Description The software contains a flaw related to improper input handling during web page creation, which can lead to Cross-site Scripting XSS. This specific instance allows for Stored XSS attack...