PT-2025-12957

Name of the Vulnerable Software and Affected Versions WP Event Ticketing versions 1.3.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inje...

Moodle Cross-Site Scripting Vulnerability (CNVD-2025-09240)

Moodle is an open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in Moodle. The vulnerability stems from insufficient cleanup and leads to a cross-site scripting...

PT-2025-12950

Name of the Vulnerable Software and Affected Versions Blue Captcha versions 1.7.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

PT-2025-12921

Name of the Vulnerable Software and Affected Versions kagla GNUPress versions 0.2.9 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to inject...

Moodle Cross-Site Scripting Vulnerability

Moodle is an open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in Moodle. The vulnerability stems from insufficient cleanup and leads to a cross-site scripting...

PT-2025-12965

Name of the Vulnerable Software and Affected Versions NotFound Simple Post Series versions through 2.4.4 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential attacker...

PT-2025-12915

Name of the Vulnerable Software and Affected Versions NotFound Zalo Live Chat versions 1.1.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-12945

Name of the Vulnerable Software and Affected Versions Arrow Maps versions 1.0.9 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential attackers to inject...

Cross-Site Scripting (XSS)

clickstorm/cs-seo is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper encoding of user input in the TYPO3 backend user interface, allowing a logged-in backend user to inject malicious scripts...

PT-2025-12641

Name of the Vulnerable Software and Affected Versions alphasis Related Posts via Categories versions n/a through 2.1.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This affects the alphasi...

PT-2025-12618

Name of the Vulnerable Software and Affected Versions My Default Post Content versions 0.7.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to...

PT-2025-12580

Name of the Vulnerable Software and Affected Versions My Bootstrap Menu versions 1.2.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject...

PT-2025-12597

Name of the Vulnerable Software and Affected Versions issuuPress versions 1.3.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject maliciou...

PT-2025-12592

Name of the Vulnerable Software and Affected Versions BMo Expo versions 1.0.0 through 1.0.15 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS. This means that an attacker can inject...

PT-2025-12636

Name of the Vulnerable Software and Affected Versions iografica IG Shortcodes versions 3.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This enables potential attackers ...

PT-2025-12585

Name of the Vulnerable Software and Affected Versions MorganF Weather Layer versions n/a through 4.2.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inje...

PT-2025-12600

Name of the Vulnerable Software and Affected Versions CallPhone'r versions 1.1.1 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can execute malicious scripts on the victim's browser, potentially leading to...

PT-2025-12639

Name of the Vulnerable Software and Affected Versions WP Hotjar versions 0.0.0 through 0.0.3 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables an attacker to inject malicious...

PT-2025-12593

Name of the Vulnerable Software and Affected Versions AvaiBook versions n/a through 1.2 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious scripts into...

CVE-2024-10721

A stored cross-site scripting XSS vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the application, which can be executed in the context of other users who view the affected page. The issue occurs in the circuits...