PT-2025-13662

Name of the Vulnerable Software and Affected Versions JetSearch versions 3.5.7 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS in JetSearch. This enables potential attackers...

PT-2025-13737

Name of the Vulnerable Software and Affected Versions Kibru Demeke Ethiopian Calendar versions n/a through 1.1.1 Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can injec...

PT-2025-13750

Name of the Vulnerable Software and Affected Versions Cal.com versions n/a through 1.0.0 Description The issue is related to Improper Neutralization of Script-Related HTML Tags in a Web Page, also known as Basic XSS, allowing Stored XSS. This means that an attacker can inject malicious scripts in...

PT-2025-13753

Name of the Vulnerable Software and Affected Versions flomei Simple-Audioplayer versions n/a through 1.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-13756

Name of the Vulnerable Software and Affected Versions Gingerplugins Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme versions n/a through 1.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site...

PT-2025-13707

Name of the Vulnerable Software and Affected Versions Checklist versions 1.1.9 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicious scripts in...

PT-2025-13768

Name of the Vulnerable Software and Affected Versions Useinfluence versions n/a through 1.0.8 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-13760

Name of the Vulnerable Software and Affected Versions owenr88 Simple Contact Forms versions 1.6.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers ...

Duplicate Advisory: HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f7jh-m6wp-jm7f. This link is maintained to preserve external references. Original Description A flaw was found in the JBoss EAP Management Console, where a stored Cross-site scripting vulnerability occurs when a...

GHSA-HP88-HFJW-2HG4 Duplicate Advisory: HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f7jh-m6wp-jm7f. This link is maintained to preserve external references. Original Description A flaw was found in the JBoss EAP Management Console, where a stored Cross-site scripting vulnerability occurs when a...

PT-2025-13460

Name of the Vulnerable Software and Affected Versions Ultimate Blocks versions n/a through 3.2.7 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This enables potential attackers to inject...

PT-2025-13458

Name of the Vulnerable Software and Affected Versions videowhisper MicroPayments versions through 2.9.29 Description The issue is related to improper neutralization of script-related HTML tags in a web page, which allows for Stored XSS attacks. This means that an attacker can inject malicious...

PT-2025-13530 · Red Hat · Jboss Eap Management Console

Name of the Vulnerable Software and Affected Versions: JBoss EAP Management Console affected versions not specified Description: A stored Cross-site scripting issue occurs when the application fails to properly sanitize user input before storing it, allowing malicious scripts to execute in the...

PT-2025-13506

Name of the Vulnerable Software and Affected Versions Flatty versions n/a through 2.0.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious...

PT-2025-13478

Name of the Vulnerable Software and Affected Versions Miguel Sirvent Magic Embeds versions n/a through 3.1.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker ca...

PT-2025-13500

Name of the Vulnerable Software and Affected Versions Text Selection Color versions n/a through 1.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-13493

Name of the Vulnerable Software and Affected Versions YouTube SimpleGallery versions n/a through 2.0.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inje...

PT-2025-13540

Name of the Vulnerable Software and Affected Versions ULTIMATE VIDEO GALLERY versions 1.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-13192

Name of the Vulnerable Software and Affected Versions yudleethemes City Store versions 1.4.5 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This enables potential attackers to...

PT-2025-13108

Name of the Vulnerable Software and Affected Versions Cozy Blocks versions 2.1.6 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicio...