CVE-2025-31442 WordPress Search engine keywords highlighter plugin <= 0.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Search engine keywords highlighter allows Reflected XSS. This issue affects Search engine keywords highlighter: from n/a through 0.1.3...

ThinkOX 代码注入漏洞

ThinkOX is a lightweight social platform developed by individual developer Cai Peichao caipeichao. A code injection vulnerability exists in ThinkOX version 1.0, which stems from a cross-site scripting attack caused by incorrect operation of the parameter keywords...

ForestBlog 安全漏洞

ForestBlog is a blogging system. A cross-site scripting vulnerability exists in ForestBlog 20250321 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data by the parameter keywords, and can be exploited by an attacker to execute arbitrary Web...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the manipulation of the getvar argument in the cssgen.php file. An attacker can inject malicious scripts by manipulating the input parameter...

DEBIAN-CVE-2025-2123

A vulnerability, which was classified as problematic, has been found in GeSHi up to 1.0.9.1. Affected by this issue is the function getvar of the file /contrib/cssgen.php of the component CSS Handler. The manipulation of the argument...

GeSHi 代码注入漏洞

GeSHi is a Generic Syntax Highlighter open source PHP generic syntax highlighter. A code injection vulnerability exists in GeSHi version 1.0.9.1 and earlier, which stems from incorrect manipulation of the parameters default-styles, keywords-1, keywords-2, keywords-3, keywords-4, and comments can...

CVE-2025-22685

Cross-Site Request Forgery CSRF vulnerability in CheGevara29 Tags to Keywords tags-to-meta-keywords allows Stored XSS.This issue affects Tags to Keywords: from n/a through = 1.0.1...

CVE-2024-32528

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Seerox WP Dynamic Keywords Injector allows Reflected XSS.This issue affects WP Dynamic Keywords Injector: from n/a through 2.3.18...

CVE-2024-54438

Cross-Site Request Forgery CSRF vulnerability in gaxx Gaxx Keywords gaxx-keywords allows Stored XSS.This issue affects Gaxx Keywords: from n/a through = 0.2...

CVE-2025-22685

Cross-Site Request Forgery CSRF vulnerability in CheGevara29 Tags to Keywords tags-to-meta-keywords allows Stored XSS.This issue affects Tags to Keywords: from n/a through = 1.0.1...

CVE-2025-22685 WordPress Tags to Keywords plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in CheGevara29 Tags to Keywords tags-to-meta-keywords allows Stored XSS.This issue affects Tags to Keywords: from n/a through = 1.0.1...

CVE-2025-22685 WordPress Tags to Keywords plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in CheGevara29 Tags to Keywords tags-to-meta-keywords allows Stored XSS.This issue affects Tags to Keywords: from n/a through = 1.0.1...

CVE-2025-22685

CVE-2025-22685 is a CSRF-to-Stored XSS vulnerability in the WordPress plugin Tags to Keywords (also listed as Tags to Keywords/Tags to Meta Keywords) affecting versions up to and including 1.0.1. The vulnerability can allow a CSRF attacker to inject or persist XSS payloads in stored form. Public ...

WordPress Tags to Keywords plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Tags to Keywords versions = 1.0.1...

The vulnerability of the Suricata intrusion detection and prevention system, related to the execution of operations beyond the buffer boundaries, allows an intruder to execute arbitrary code or trigger a service failure.

The vulnerability of the Suricata intrusion detection and prevention system lies in the escape of the operation beyond the buffer in memory due to incorrect processing of transformation keywords. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service...

bookstore 跨站脚本漏洞

bookstore is an e-commerce bookstore system by donglight individual developer. A cross-site scripting vulnerability exists in bookstore version 1.0.0, which originates from the parameter keywords in the file src/main/java/org/zdd/bookstore/web/controller/BookInfoController.java that can lead to...

WordPress SEO Keywords plugin <= 1.1.3 - Reflected Cross-Site Scripting via google_error Parameter vulnerability

Reflected Cross-Site Scripting via googleerror Parameter vulnerability discovered by vgo0 in WordPress Plugin seo-keywords versions = 1.1.3...

CVE-2024-12126 SEO Keywords <= 1.1.3 - Reflected Cross-Site Scripting via google_error Parameter

The SEO Keywords plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘googleerror’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...

CVE-2024-12126 SEO Keywords <= 1.1.3 - Reflected Cross-Site Scripting via google_error Parameter

The SEO Keywords plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘googleerror’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...

CVE-2024-12126

CVE-2024-12126 affects the WordPress plugin SEO Keywords. It enables a reflected Cross-Site Scripting (XSS) through the google_error parameter in all versions up to 1.1.3 due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary scripts ...