PT-2025-13184

Name of the Vulnerable Software and Affected Versions CodeTrendy Power Mag versions 1.1.5 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means an attacker could potentially inject malicious scripts...

PT-2025-12921

Name of the Vulnerable Software and Affected Versions kagla GNUPress versions 0.2.9 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

Moodle Cross-Site Scripting Vulnerability

Moodle is an open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in Moodle. The vulnerability stems from insufficient cleanup and leads to a cross-site scripting...

PT-2025-12958

Name of the Vulnerable Software and Affected Versions NotFound Driving Directions versions n/a through 1.4.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacker...

PT-2025-12947

Name of the Vulnerable Software and Affected Versions NextGEN Gallery Voting versions through 2.7.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential attackers to...

PT-2025-12906

Name of the Vulnerable Software and Affected Versions Infugrator versions 1.0.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-12909

Name of the Vulnerable Software and Affected Versions Google Plus versions n/a through 1.0.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-12915

Name of the Vulnerable Software and Affected Versions NotFound Zalo Live Chat versions 1.1.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-12965

Name of the Vulnerable Software and Affected Versions NotFound Simple Post Series versions through 2.4.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential attacker...

PT-2025-12963

Name of the Vulnerable Software and Affected Versions ZenphotoPress versions 1.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-12966

Name of the Vulnerable Software and Affected Versions Fancybox Plus versions 1.0.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-12923

Name of the Vulnerable Software and Affected Versions Rizzi Guestbook versions n/a through 4.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential attackers to...

PT-2025-12961

Name of the Vulnerable Software and Affected Versions NotFound Custom Smilies versions 2.9.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-12950

Name of the Vulnerable Software and Affected Versions Blue Captcha versions 1.7.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

Moodle Cross-Site Scripting Vulnerability (CNVD-2025-09240)

Moodle is an open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in Moodle. The vulnerability stems from insufficient cleanup and leads to a cross-site scripting...

PT-2025-12945

Name of the Vulnerable Software and Affected Versions Arrow Maps versions 1.0.9 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential attackers to inject...

PT-2025-12957

Name of the Vulnerable Software and Affected Versions WP Event Ticketing versions 1.3.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inje...

PT-2025-12895

Name of the Vulnerable Software and Affected Versions FOMO Pay Chinese Payment Solution versions n/a through 2.0.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

Cross-Site Scripting (XSS)

clickstorm/cs-seo is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper encoding of user input in the TYPO3 backend user interface, allowing a logged-in backend user to inject malicious scripts...

PT-2025-12593

Name of the Vulnerable Software and Affected Versions AvaiBook versions n/a through 1.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious scripts into...