5 matches found
EUVD-2025-205666
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jakub Glos Off Page SEO allows Reflected XSS.This issue affects Off Page SEO: from n/a through 3.0.3...
CVE-2025-23554
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jakub Glos Off Page SEO off-page-seo allows Reflected XSS.This issue affects Off Page SEO: from n/a through = 3.0.3...
PT-2025-53828
Name of the Vulnerable Software and Affected Versions Jakub Glos Off Page SEO versions through 3.0.3 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, leading to a potential Reflected Cross-Site Scripting XSS condition. This allo...
CVE-2025-32157
CVE-2025-32157 : Sparkle Elementor Kit (WordPress) is vulnerable to a Local File Inclusion due to improper filename validation in PHP include/require. Affected: Sparkle Elementor Kit ≤ 2.0.9. Root cause: Improper control of filename for include/require statements. Access: requires authentication ...
PT-2025-14943 · Unknown · Jakub Glos Sparkle Elementor Kit
Name of the Vulnerable Software and Affected Versions: Jakub Glos Sparkle Elementor Kit versions 2.0.9 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local...