WordPress plugin LC Wizard 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

WordPress plugin Penci Portfolio 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

编号撤回

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-38858

Name of the Vulnerable Software and Affected Versions xnau webdesign Participants Database versions through 2.7.6.3 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means malicious script...

WordPress plugin Last Updated Shortcode Cross-site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...

PT-2025-38996

Name of the Vulnerable Software and Affected Versions AffiliateWP – External Referral Links versions through 1.2.0 Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting issue. This allows for the injectio...

PT-2025-38942

Name of the Vulnerable Software and Affected Versions JS Morisset JSM file get contents Shortcode versions through 2.7.1 Description A flaw exists in JS Morisset JSM file get contents Shortcode that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input...

PT-2025-38919

Name of the Vulnerable Software and Affected Versions Jonathan Brinley DOAJ Export versions through 1.0.4 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, which can lead to Stored Cross-Site Scripting XSS. This allows an attacker...

WordPress plugin ShortCode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Fusion Page Builder Extension Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...

PT-2025-38886

Name of the Vulnerable Software and Affected Versions Techeshta Card Elements for WPBakery versions through 1.0.8 Description The software contains a flaw related to improper input handling during web page generation, leading to a DOM-Based Cross-site Scripting issue. This allows for the injectio...

PT-2025-39000

Name of the Vulnerable Software and Affected Versions Ironikus WP Mailto Links versions through 3.1.4 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, leading to a potential Cross-site Scripting XSS issue. This specific instance...

PT-2025-38785

Name of the Vulnerable Software and Affected Versions Ricky Dawn Bot Block – Stop Spam Referrals in Google Analytics versions through 2.6 Description The software contains a flaw related to improper input handling during web page generation, leading to a Cross-site Scripting XSS issue. This...

PT-2025-38889

Name of the Vulnerable Software and Affected Versions VoucherPress versions through 1.5.7 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can be injected int...

CVE-2025-8664

The CVE-2025-8664 entry concerns StarCities E-Municipality Management from Saysis Computer Systems Trade Ltd. Co. with an XSS vulnerability due to improper input neutralization during web page generation. Affected versions are before 20250825. The PT-2025-38542 entry provides a remediation note t...

CVE-2025-0879

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Shopside Software Shopside App allows Cross-Site Scripting XSS. This issue requires high privileges. This issue affects Shopside App: before 17.02.2025...

CVE-2025-0420

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Paraşüt Software Paraşüt allows Cross-Site Scripting XSS.This issue affects Paraşüt: from 0.0.0.65efa44e through 20250204...

PT-2025-38527

Name of the Vulnerable Software and Affected Versions Vizly Web Design Real Estate Packages versions prior to 5.1 Description The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, also known as Cross-site Scripting XSS. This issue allows for Content...

PT-2025-38542

Name of the Vulnerable Software and Affected Versions Saysis Computer Systems Trade Ltd. Co. StarCities E-Municipality Management versions prior to 20250825 Description The software contains an Improper Neutralization of Input During Web Page Generation, which allows for Cross-Site Scripting XSS...

CVE-2024-12796

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Holistic IT, Consultancy Coop. Workcube ERP allows Reflected XSS.This issue affects Workcube ERP: from V12 - V14 before Cognitive...