CVE-2025-23772

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Eugenio Petulla’ imaGenius imagenius allows Stored XSS.This issue affects imaGenius: from n/a through = 1.7...

CVE-2025-23689

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poco Blogger Image Import allows Stored XSS.This issue affects Blogger Image Import: from 2.1 through n/a...

CVE-2025-23547

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shawfactor LH Login Page lh-login-page allows Reflected XSS.This issue affects LH Login Page: from n/a through = 2.14...

CVE-2025-23925

CVE-2025-23925 concerns a Stored XSS in Feedburner Optin Form (WordPress plugin) due to improper input neutralization during web page generation. Affected: Feedburner Optin Form versions from n/a up to and including 0.2.8. Root cause: improper neutralization of user input leading to cross-site sc...

CVE-2025-23897 WordPress Apply with LinkedIn buttons plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ivobrett Apply with LinkedIn buttons apply-with-linkedin-buttons allows DOM-Based XSS.This issue affects Apply with LinkedIn buttons: from n/a through = 2.3...

CVE-2025-23896 WordPress Mindmeister Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in thom4 Mindmeister Shortcode mindmeister-shortcode allows DOM-Based XSS.This issue affects Mindmeister Shortcode: from n/a through = 1.0...

CVE-2025-23830

CVE-2025-23830 affects the JB Horizontal Scroller News Ticker. The issue is a DOM-based XSS caused by improper neutralization of input during web page generation, affecting JB Horizontal Scroller News Ticker versions up to 1.0 (inclusive). No remediation details are provided in the supplied docum...

CVE-2025-23794

CVE-2025-23794 is a stored XSS vulnerability in the WordPress plugin wp_amaps (wp_amaps), caused by improper neutralization of input during web page generation. The Red Hat/NVD records indicate the issue affects wp_amaps versions up to and including 1.7 (exact start version not specified). There ...

CVE-2025-23699

CVE-2025-23699 — Reflected XSS in TechMix Event Countdown Timer Plugin for WordPress (Event Countdown Timer by TechMix). Affected: Plugin versions up to 1.4 (and possibly n/a), vulnerable code path during web page generation allowing Reflected XSS. CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L; ...

CVE-2025-23547

CVE-2025-23547 describes a Reflected XSS in the LH Login Page (Peter Shaw). Affected product: LH Login Page, versions up to 2.14. The vulnerability is due to improper input neutralization during web page generation. CVSS 3.1 vector indicates Network attack, low confidentiality/integrity/availabil...

CVE-2025-23432 WordPress AlT Report plugin <= 1.12.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlTi5 AlT Report alt-report allows Reflected XSS.This issue affects AlT Report: from n/a through = 1.12.0...

PT-2025-5170

Name of the Vulnerable Software and Affected Versions Scott Allan Wallick Blog Summary versions 0.1.2 β and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

PT-2025-5144

Name of the Vulnerable Software and Affected Versions Alessandro Staniscia Simple Vertical Timeline versions n/a through 0.1 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potential...

PT-2025-4978

Name of the Vulnerable Software and Affected Versions Captchelfie – Captcha by Selfie versions 1.0.7 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This means an attacker can inject...

PT-2025-5207

Name of the Vulnerable Software and Affected Versions Google Org Chart versions n/a through 1.0.1 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. This means that an attacker can inject...

PT-2025-5125

Name of the Vulnerable Software and Affected Versions Strx Magic Floating Sidebar Maker versions 1.4.1 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can...

PT-2025-5221

Name of the Vulnerable Software and Affected Versions arul PDF.js Shortcode versions n/a through 1.0 Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious...

PT-2025-5227 · Ezplayer · Ezplayer

Name of the Vulnerable Software and Affected Versions: EZPlayer versions 1.0.10 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious scripts...

PT-2025-4934

Name of the Vulnerable Software and Affected Versions LH Login Page versions prior to 2.14 Description The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This means that an attacker can inject malicious scripts...

PT-2025-5164

Name of the Vulnerable Software and Affected Versions Scott Reilly Post-to-Post Links versions n/a through 4.2 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an attacke...