PT-2025-13237

Name of the Vulnerable Software and Affected Versions Orbit Fox by ThemeIsle versions 2.10.44 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can injec...

PT-2025-13152

Name of the Vulnerable Software and Affected Versions Ays Pro Chartify versions n/a through 3.1.7 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject...

PT-2025-13114

Name of the Vulnerable Software and Affected Versions Ashley Novelist versions 1.2.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious...

PT-2025-13269

Name of the Vulnerable Software and Affected Versions Foliovision Filled In versions 1.9.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicio...

PT-2025-13077

Name of the Vulnerable Software and Affected Versions Pagup WP Google Street View versions 1.1.5 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker ca...

PT-2025-13161

Name of the Vulnerable Software and Affected Versions Simplebooklet PDF Viewer and Embedder versions 1.1.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS attacks. This mea...

PT-2025-13184

Name of the Vulnerable Software and Affected Versions CodeTrendy Power Mag versions 1.1.5 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means an attacker could potentially inject malicious scripts...

PT-2025-13121

Name of the Vulnerable Software and Affected Versions Off-Canvas Sidebars & Menus Slidebars versions 0.5.8.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that...

PT-2025-13238

Name of the Vulnerable Software and Affected Versions Wolfgang Include Mastodon Feed versions n/a through 1.9.9 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an...

PT-2025-13100

Name of the Vulnerable Software and Affected Versions Pierre Lannoy IP Locator versions n/a through 4.1.0 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker...

PT-2025-13107

Name of the Vulnerable Software and Affected Versions LatePoint versions through 5.1.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious scripts into...

PT-2025-12958

Name of the Vulnerable Software and Affected Versions NotFound Driving Directions versions n/a through 1.4.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacker...

PT-2025-12906

Name of the Vulnerable Software and Affected Versions Infugrator versions 1.0.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-12947

Name of the Vulnerable Software and Affected Versions NextGEN Gallery Voting versions through 2.7.6 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential attackers to...

PT-2025-12909

Name of the Vulnerable Software and Affected Versions Google Plus versions n/a through 1.0.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-12963

Name of the Vulnerable Software and Affected Versions ZenphotoPress versions 1.8 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-12966

Name of the Vulnerable Software and Affected Versions Fancybox Plus versions 1.0.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-12923

Name of the Vulnerable Software and Affected Versions Rizzi Guestbook versions n/a through 4.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential attackers to...

PT-2025-12961

Name of the Vulnerable Software and Affected Versions NotFound Custom Smilies versions 2.9.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-12895

Name of the Vulnerable Software and Affected Versions FOMO Pay Chinese Payment Solution versions n/a through 2.0.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...