CVE-2025-23461

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xkollsoftware Social2Blog social2blog allows Reflected XSS.This issue affects Social2Blog: from n/a through = 0.2.990...

CVE-2025-23551 WordPress SexBundle plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in razvypp SexBundle sexbundle allows Reflected XSS.This issue affects SexBundle: from n/a through = 1.4...

CVE-2025-22267

CVE-2025-22267 is a stored XSS in the WordPress plugin “Weaver Themes Shortcode Compatibility.” The issue arises from improper input neutralization during web page generation and affects versions from n/a up to and including 1.0.4. The vulnerability is authenticated (Contributor+) and is describe...

CVE-2025-22706

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iova.mihai Social Pug: Author Box allows Reflected XSS. This issue affects Social Pug: Author Box: from n/a through 1.0.0...

CVE-2024-49300

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows Reflected XSS. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/a through 1.16.5...

CVE-2025-22719

CVE-2025-22719 is a Stored XSS in VikAppointments Services Booking Calendar (E4J s.r.l.) across VikAppointments versions up to 1.2.16 (no details beyond that). Public sources (Red Hat, ENISA EUVD, Patchstack) describe it as Improper Neutralization of Input During Web Page Generation (XSS) with CV...

CVE-2025-22709

CVE-2025-22709 describes a reflected cross-site scripting vulnerability affecting Verge3D (Soft8Soft) where input is improperly neutralized during web page generation. The impact is a Reflected XSS in Verge3D versions from n/a up to 4.8.0. CVSS v3.1 details show a base score of 7.1 (HIGH) with ne...

CVE-2025-22262

CVE-2025-22262 is a Stored XSS vulnerability in the WittyFolk Bonjour Bar bonjour-bar WordPress plugin. The issue affects Bonjour Bar versions

CVE-2024-49300 WordPress Hero Menu plugin <= 1.16.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows Reflected XSS. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/a through 1.16.5...

PT-2025-4638

Name of the Vulnerable Software and Affected Versions Social Pug: Author Box versions prior to 1.0.0 Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This means an attacker can inject malicious script...

PT-2025-4406

Name of the Vulnerable Software and Affected Versions Enguerran Weiss Related Post Shortcode versions n/a through 1.2 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS. Recommendations...

PT-2025-4951 · Unknown · Bizlibrary

Name of the Vulnerable Software and Affected Versions: BizLibrary versions n/a through 1.1 Description: The issue is related to improper neutralization of input during web page generation, which allows Reflected XSS. This means that an attacker can inject malicious scripts into the website,...

PT-2025-4656

Name of the Vulnerable Software and Affected Versions Admiral Ad Blocking Detector versions n/a through 3.6.0 Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...

WordPress plugin My Auctions Allegro has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress plugin: Flexible PDF Coupons – Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up personal blog sites. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

WordPress plugin ARPrice has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

Fortinet FortiDeceptor Cross-Site Scripting Vulnerability

Fortinet FortiDeceptor is a cyber threat detection platform from the American company Fiat Fortinet. The platform focuses on exposing cyber threats through deception techniques, among other things. Fortinet FortiDeceptor cross-site scripting vulnerability, the vulnerability stems from the...

CVE-2025-23924

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jeremy WP Photo Sphere wp-photo-sphere allows Stored XSS.This issue affects WP Photo Sphere: from n/a through = 3.8...

CVE-2025-23899

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bookalet Bookalet bookalet allows Stored XSS.This issue affects Bookalet: from n/a through = 1.0.3...

CVE-2025-23816

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in metaphorcreations Metaphor Widgets allows Stored XSS. This issue affects Metaphor Widgets: from n/a through 2.4...