WordPress plugin WP2LEADS 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

PT-2025-4574 · WordPress · Wpex Replace Db Urls

The vulnerable software is WPEX Replace DB Urls, developed by Detlef Stöver. The vulnerability is an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This issue affects WPEX Replace DB Urls versions from n/a through...

PT-2025-4564 · Marcus Downing · Site Pin

The vulnerable software is Marcus Downing Site PIN, with versions from n/a through 1.3 being affected. The vulnerability is an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This type of vulnerability can be exploit...

WordPress plugin Smart Agenda 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exist...

WordPress plugin Inline Tweets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin Scanventory 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

CVE-2025-23079 XSSes in Extension:ArticleFeedbackv5

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - ArticleFeedbackv5 extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - ArticleFeedbackv5 extension: from 1.42.X before 1.42.2...

Mediawiki Breadcrumbs2 安全漏洞

Mediawiki Breadcrumbs2 is a Mediawiki extension from the Wikimedia Foundation. A security vulnerability exists in Mediawiki Breadcrumbs2, which stems from improper input neutralization during page generation and is susceptible to cross-site scripting attacks...

Mediawiki ArticleFeedback 安全漏洞

Mediawiki ArticleFeedback is a Mediawiki extension from the Wikimedia Foundation USA. A security vulnerability exists in Mediawiki ArticleFeedback version 1.42.X, prior to version 1.42.2, which stems from improper input neutralization during page generation and is vulnerable to cross-site scripti...

CVE-2024-13308 Browser Back Button - Moderately critical - Cross site scripting - SA-CONTRIB-2024-072

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Browser Back Button allows Cross-Site Scripting XSS.This issue affects Browser Back Button: from 1.0.0 before 2.0.2...

CVE-2024-13294 POST File - Critical - Cross Site Scripting, Arbitrary PHP code execution - SA-CONTRIB-2024-060

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal POST File allows Cross-Site Scripting XSS.This issue affects POST File: from 0.0.0 before 1.0.2...

CVE-2024-13292 Tooltip - Moderately critical - Cross site scripting - SA-CONTRIB-2024-058

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Tooltip allows Cross-Site Scripting XSS.This issue affects Tooltip: from 0.0.0 before 1.1.2...

CVE-2024-13289

The Drupal Cookiebot + GTM module (versions before 1.0.18 ) is vulnerable to Cross-Site Scripting (XSS) due to improper input neutralization during web page generation. Specifically, the module fails to sufficiently filter for malicious scripts, allowing an attacker to perform remote XSS attacks....

CVE-2024-13283

The Drupal Facets module is vulnerable to a reflected Cross-Site Scripting (XSS) issue due to improper input neutralization during web page generation. This vulnerability specifically exists in the Facets Summary submodule ; sites not using this specific submodule are not affected. This issue imp...

CVE-2024-13262 View Password - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-026

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal View Password allows Cross-Site Scripting XSS.This issue affects View Password: from 0.0.0 before 6.0.4...

CVE-2025-22810

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Phi Phan Content Blocks Builder content-blocks-builder allows Stored XSS.This issue affects Content Blocks Builder: from n/a through = 2.7.6...

CVE-2025-22539

CVE-2025-22539 affects the ka2 Custom DataBase Tables WordPress plugin. The connected document details a Reflected Cross-Site Scripting vulnerability caused by improper neutralization of input during web page generation. The issue affects Custom DataBase Tables versions from n/a up to 2.1.34. The...

CVE-2025-22804

CVE-2025-22804 affects the WordPress plugin Author Avatars List/Block. It is a stored XSS vulnerability exploitable by authenticated users with Contributor+ access (due to insufficient input neutralization in Author Avatars List/Block

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Views SVG Animation prior to version 1.0.1, which stems from improper input neutralization during page generation, resulting in a cross-site scriptin...

WordPress plugin Content Blocks Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...