CVE-2025-23500

CVE-2025-23500 describes a Reflected XSS in the WordPress plugin Simple Custom post type custom field (also listed as Simple Content Construction Kit) that allows input that is not properly neutralized during web page generation. Affected versions are from n/a through 1.0.3. The CVSS/metrics indi...

PT-2025-5140

Name of the Vulnerable Software and Affected Versions Kolja Nolte Flexible Blogtitle versions n/a through 0.1 Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations For...

PT-2025-5112

Name of the Vulnerable Software and Affected Versions Contact Form 7 Round Robin Lead Distribution versions 1.2.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables an attacker ...

PT-2025-4963

Name of the Vulnerable Software and Affected Versions Rio Photo Gallery versions 0.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This means an attacker can inject malicious scripts in...

PT-2025-5251 · Unknown · Leetoo Toocheke Companion

Name of the Vulnerable Software and Affected Versions: Leetoo Toocheke Companion versions prior to 1.166 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject...

PT-2025-4906 · Unknown · Translation.Pro

Name of the Vulnerable Software and Affected Versions: Translation.Pro versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This means an attacker can inject malicious...

PT-2025-5062

Name of the Vulnerable Software and Affected Versions NotFound CMC MIGRATE versions 0.0.0 through 0.0.3 Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This can lead to the execution of malicious...

PT-2025-5166

Name of the Vulnerable Software and Affected Versions WP Download Codes versions 2.5.4 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Reflected XSS. This means that an attacker can inject malicious code into a website,...

PT-2025-5020 · Macme · Macme

Name of the Vulnerable Software and Affected Versions: MACME versions n/a through 1.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected XSS. This means that an attacker can inject malicious scripts into a website,...

PT-2025-4968 · Unknown · Rezdy Reloaded

Name of the Vulnerable Software and Affected Versions: Rezdy Reloaded versions 1.0.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website...

WordPress plugin Content Planner has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin Easy Filtering: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

WordPress plugin Pootle button has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin InFunding has a cross-site scripting vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-5031 · Unknown · Notfound Staging Cdn

Name of the Vulnerable Software and Affected Versions: NotFound Staging CDN versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This enables potential attacke...

WordPress Plugin ReadMe Creator Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-4973

Name of the Vulnerable Software and Affected Versions NotFound Ultimate Events versions 1.3.3 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Reflected XSS. This means that an attacker can inject malicious scripts into...

PT-2025-4908

Name of the Vulnerable Software and Affected Versions Simple Custom post type custom field versions 1.0.0 through 1.0.3 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This problem allows reflected XSS in the...

PT-2025-4996

Name of the Vulnerable Software and Affected Versions NotFound ReadMe Creator versions n/a through 1.0 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This enables potential attacker...

CVE-2025-23580

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Matthew BizLibrary bizlibrary allows Reflected XSS.This issue affects BizLibrary: from n/a through = 1.1...