CVE-2025-0878

The CVE-2025-0878 entry describes an XSS vulnerability in Akinsoft LimonDesk due to improper input neutralization during web page generation, affecting LimonDesk versions from s1.02.14 up to before v1.02.17. The underlying issue is in how user-supplied input is handled when generating web pages, ...

CVE-2024-13064

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft MyRezzta allows Cross-Site Scripting XSS. This issue affects MyRezzta: from s2.02.02 before v2.05.01...

PT-2025-35757

Name of the Vulnerable Software and Affected Versions: falselight Exchange Rates versions n/a through 1.2.5 Description: falselight Exchange Rates is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. The vulnerability allows for...

WordPress plugin Dadevarzan WordPress Common 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Dadevarzan...

PT-2025-35748

Name of the Vulnerable Software and Affected Versions: Tooltipy versions through 5.5.6 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Tooltipy to a version later tha...

PT-2025-35743

Name of the Vulnerable Software and Affected Versions: Latest Post Shortcode versions through 14.0.3 Description: The Latest Post Shortcode contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. Recommendations: Update...

PT-2025-35759

Name of the Vulnerable Software and Affected Versions: RumbleTalk Live Group Chat versions through 6.3.5 Description: RumbleTalk Live Group Chat is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attack...

PT-2025-35761

Name of the Vulnerable Software and Affected Versions: IssueM versions through 2.9.0 Description: The software contains a DOM-Based Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update IssueM to a version later than 2.9.0...

PT-2025-35753

Name of the Vulnerable Software and Affected Versions: PDF for WPForms versions through 6.2.1 Description: The software contains a cross-site scripting XSS vulnerability due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations: Update...

WordPress plugin Document Engine 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

WordPress plugin Latest Post Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

PT-2025-35728

Name of the Vulnerable Software and Affected Versions: Orbit Fox versions through 3.0.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. Recommendations: Update Orbit Fox to a version later...

WordPress plugin Booking Ultra Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Linux Distros Unpatched Vulnerability : CVE-2019-1010091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation. The impact is: JavaScript code execution. The...

PT-2025-35736

Name of the Vulnerable Software and Affected Versions: IfSo Dynamic Content Personalization versions through 1.9.4 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks...

WordPress plugin Exchange Rates 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Cookie Notice & Consent Banner for GDPR & CCPA Compliance 跨站脚本漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Cookie...

CVE-2024-12974

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft ProKuaför allows Cross-Site Scripting XSS. This issue affects ProKuaför: from s1.02.07 before v1.02.08...

CVE-2024-12974 XSS in Akinsoft's ProKuaför

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft ProKuaför allows Cross-Site Scripting XSS. This issue affects ProKuaför: from s1.02.07 before v1.02.08...

CVE-2024-12974 XSS in Akinsoft's ProKuaför

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Akinsoft ProKuaför allows Cross-Site Scripting XSS. This issue affects ProKuaför: from s1.02.07 before v1.02.08...