WordPress plugin WP Notification Bell 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-36144

Name of the Vulnerable Software and Affected Versions: OTWthemes Widgetize Pages Light versions through 3.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation, which results in a Stored Cross-Site Scripting XSS issue. Recommendations: Update OTWtheme...

PT-2025-36224

Name of the Vulnerable Software and Affected Versions Netcad NetGIS Server versions 5.2.4 through 22.08.2025 Description Netcad NetGIS Server is susceptible to a Reflected Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the...

Netcad NetGIS Server 跨站脚本漏洞

Netcad NetGIS Server is a geospatial data distribution server from Netcad Turkey. A cross-site scripting vulnerability exists in Netcad NetGIS Server versions 5.2.4 through 22.08.2025, which stems from improper input neutralization and could lead to a reflective cross-site scripting attack...

PT-2025-36245

Name of the Vulnerable Software and Affected Versions: Easy Flash Embed versions through 1.0 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations: At the moment,...

PT-2025-36207

Name of the Vulnerable Software and Affected Versions: Simasicher SimaCookie versions through 1.3.2 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-Site Scripting XSS. Recommendations: Update Simasicher...

PT-2025-36218

Name of the Vulnerable Software and Affected Versions: gopiplus New Simple Gallery versions through 8.0 Description: The software contains an SQL injection flaw due to improper neutralization of special elements used in an SQL command. This allows for blind SQL injection. Recommendations: Version...

PT-2025-36167

Name of the Vulnerable Software and Affected Versions: codemstory 코드엠샵 소셜톡 versions through 1.2.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting XSS. Recommendations: At the moment, ther...

PT-2025-36149

Name of the Vulnerable Software and Affected Versions: jimmywb Simple Link List Widget versions through 0.3.2 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations...

PT-2025-36217

Name of the Vulnerable Software and Affected Versions: reubenthiessen Translate This gTranslate Shortcode versions through 1.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation vulnerability, which allows for Stored Cross-site Scripting XSS...

PT-2025-36219

Name of the Vulnerable Software and Affected Versions: w1zzard Simple Text Slider versions through 1.0.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update w1zzard Simpl...

PT-2025-36165

Name of the Vulnerable Software and Affected Versions: Eric Mann WP Publication Archive versions through 3.0.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Eric Mann WP...

PT-2025-36173

Name of the Vulnerable Software and Affected Versions: gugu short.io versions through 2.4.0 Description: The software contains a DOM-Based Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update gugu short.io to a version later th...

WordPress plugin Best Restaurant Menu by PriceListo 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exis...

PT-2025-36222

Name of the Vulnerable Software and Affected Versions: Tan Nguyen Instant Locations versions through 1.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: At the moment, there...

WordPress plugin Simple Link List Widget 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin WP Publication Archive 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-36215

Name of the Vulnerable Software and Affected Versions: Aparat Video Shortcode versions through 0.2.4 Description: The Ali Aghdam Aparat Video Shortcode software contains a Stored Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the...

WordPress plugin Stagtools 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-36176

Name of the Vulnerable Software and Affected Versions: Shiful H SS Font Awesome Icon versions through 4.1.3 Description: The software contains a cross-site scripting XSS issue that allows for stored XSS attacks. This occurs due to improper neutralization of input during web page generation...