CVE-2025-8318 Jobify <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via keyword Parameter

The Jobify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘keyword’ parameter in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-8318

CVE-2025-8318 affects the WordPress Jobify plugin (versions

PT-2025-37124

The Jobify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘keyword’ parameter in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-8318: Improper Neutralization of Input During Web Page Generation

The Jobify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘keyword’ parameter in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2025-10105

CVE-2025-10105 affects chanCMS (yanyutao0402) up to version 3.3.1. The vulnerability is in the /cms/article/search functionality where manipulation of the keyword parameter enables SQL injection. The issue is exploitable remotely and an exploit has been published. The CVSS data indicate high seve...

ChanCMS SQL注入漏洞

ChanCMS is a content management system developed by yanyutao0402 individual developer in China. SQL injection vulnerability exists in ChanCMS 3.3.1 and previous versions, the vulnerability stems from the incorrect operation of the parameter keyword which leads to SQL injection...

ChanCMS SQL注入漏洞

ChanCMS is a content management system developed by yanyutao0402 individual developer in China. SQL injection vulnerability exists in ChanCMS 3.3.1 and previous versions, the vulnerability stems from the incorrect operation of the parameter keyword which leads to SQL injection...

PT-2025-36512

Name of the Vulnerable Software and Affected Versions: yanyutao0402 ChanCMS versions up to 3.3.1 Description: A SQL injection issue exists in an unknown part of the file /cms/collect/search in yanyutao0402 ChanCMS. Manipulation of the keyword argument may allow for remote exploitation. The exploi...

CVE-2025-10105: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in yanyutao0402 ChanCMS up to 3.3.1. Affected by this issue is some unknown functionality of the file /cms/article/search. This manipulation of the argument keyword causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2025-10106: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.1. This affects an unknown part of the file /cms/collect/search. Such manipulation of the argument keyword leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

NULL Pointer Dereference in mrb_vm_exec with super in mruby/mruby

...

CVE-2025-51972

A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter...

CVE-2025-51972

A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter...

CVE-2025-51972

A SQL Injection vulnerability exists in the login.php file of the PuneethReddyHC Online Shopping System Advanced version 1.0 . The root cause is the improper sanitization of user-supplied input within the keyword POST parameter. This flaw allows an attacker to execute malicious SQL commands, pote...

CVE-2025-51972

A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter...

PT-2025-35088

Name of the Vulnerable Software and Affected Versions PuneethReddyHC Online Shopping System Advanced version 1.0 Description A SQL Injection vulnerability exists due to improper sanitization of user-supplied input in the keyword POST parameter of the login.php file. Recommendations Ensure proper...

CVE-2025-9431

A flaw has been found in mtons mblog up to 3.5.0. Impacted is an unknown function of the file /search. This manipulation of the argument kw causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2025-9431 mtons mblog search cross site scripting

A flaw has been found in mtons mblog up to 3.5.0. Impacted is an unknown function of the file /search. This manipulation of the argument kw causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2025-9431 mtons mblog search cross site scripting

A flaw has been found in mtons mblog up to 3.5.0. Impacted is an unknown function of the file /search. This manipulation of the argument kw causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2025-9431

The CVE-2025-9431 entry concerns mtons mblog up to version 3.5.0. The vulnerability affects the /search function, where manipulation of the kw argument enables cross-site scripting. The issue can be exploited remotely, and exploits have been published. Public sources in the connected documents (e...