PT-2025-13530 · Red Hat · Jboss Eap Management Console

Name of the Vulnerable Software and Affected Versions: JBoss EAP Management Console affected versions not specified Description: A stored Cross-site scripting issue occurs when the application fails to properly sanitize user input before storing it, allowing malicious scripts to execute in the...

PT-2025-13478

Name of the Vulnerable Software and Affected Versions Miguel Sirvent Magic Embeds versions n/a through 3.1.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker ca...

PT-2025-13460

Name of the Vulnerable Software and Affected Versions Ultimate Blocks versions n/a through 3.2.7 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This enables potential attackers to inject...

PT-2025-13540

Name of the Vulnerable Software and Affected Versions ULTIMATE VIDEO GALLERY versions 1.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-13493

Name of the Vulnerable Software and Affected Versions YouTube SimpleGallery versions n/a through 2.0.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inje...

PT-2025-13500

Name of the Vulnerable Software and Affected Versions Text Selection Color versions n/a through 1.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-13506

Name of the Vulnerable Software and Affected Versions Flatty versions n/a through 2.0.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious...

PT-2025-13458

Name of the Vulnerable Software and Affected Versions videowhisper MicroPayments versions through 2.9.29 Description The issue is related to improper neutralization of script-related HTML tags in a web page, which allows for Stored XSS attacks. This means that an attacker can inject malicious...

PT-2025-13192

Name of the Vulnerable Software and Affected Versions yudleethemes City Store versions 1.4.5 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This enables potential attackers to...

PT-2025-13108

Name of the Vulnerable Software and Affected Versions Cozy Blocks versions 2.1.6 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicio...

PT-2025-13237

Name of the Vulnerable Software and Affected Versions Orbit Fox by ThemeIsle versions 2.10.44 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can injec...

PT-2025-13152

Name of the Vulnerable Software and Affected Versions Ays Pro Chartify versions n/a through 3.1.7 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject...

PT-2025-13114

Name of the Vulnerable Software and Affected Versions Ashley Novelist versions 1.2.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious...

PT-2025-13161

Name of the Vulnerable Software and Affected Versions Simplebooklet PDF Viewer and Embedder versions 1.1.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS attacks. This mea...

PT-2025-13269

Name of the Vulnerable Software and Affected Versions Foliovision Filled In versions 1.9.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicio...

PT-2025-13077

Name of the Vulnerable Software and Affected Versions Pagup WP Google Street View versions 1.1.5 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker ca...

PT-2025-13184

Name of the Vulnerable Software and Affected Versions CodeTrendy Power Mag versions 1.1.5 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means an attacker could potentially inject malicious scripts...

PT-2025-13238

Name of the Vulnerable Software and Affected Versions Wolfgang Include Mastodon Feed versions n/a through 1.9.9 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an...

PT-2025-13100

Name of the Vulnerable Software and Affected Versions Pierre Lannoy IP Locator versions n/a through 4.1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker...

PT-2025-13121

Name of the Vulnerable Software and Affected Versions Off-Canvas Sidebars & Menus Slidebars versions 0.5.8.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that...