Lucene search
+L

12879 matches found

NVD
NVD
•added 2026/01/05 5:15 p.m.•16 views

CVE-2024-30461

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tumult Inc Tumult Hype Animations allows DOM-Based XSS.This issue affects Tumult Hype Animations: from n/a through 1.9.11...

7.1CVSS0.00181EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/05 2:15 p.m.•17 views

CVE-2024-23511

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows DOM-Based XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 5.3.3...

6.5CVSS0.00152EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/05 11:17 a.m.•20 views

CVE-2025-31044

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/05 10:44 a.m.•51 views

CVE-2025-68865 WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Infility Infility Global infility-global allows SQL Injection.This issue affects Infility Global: from n/a through = 2.15.06...

9.3CVSS0.00273EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/05 10:23 a.m.•19 views

EUVD-2026-0870

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS7.1AI score0.00251EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/05 10:21 a.m.•14 views

EUVD-2026-0869

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Amazon Native Shopping Recommendations allows SQL Injection.This issue affects Amazon Native Shopping Recommendations: from n/a through 1.3...

9.3CVSS7.1AI score0.00282EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•17 views

WordPress plugin Dokan Pro 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-sit...

6.5CVSS7.4AI score0.00154EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/05 12:00 a.m.•20 views

PT-2026-1281

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in INTINITUM FORM Geo Controller allows DOM-Based XSS.This issue affects Geo Controller: from n/a through 8.5.2...

6.5CVSS6.4AI score0.00162EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/05 12:00 a.m.•7 views

CVE-2025-39497: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dokan Dokan Pro allows Stored XSS.This issue affects Dokan Pro: from n/a through 3.14.5...

6.5CVSS8.1AI score0.00154EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/05 12:00 a.m.•3 views

CVE-2024-30461: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tumult Inc Tumult Hype Animations allows DOM-Based XSS.This issue affects Tumult Hype Animations: from n/a through 1.9.11...

7.1CVSS8.1AI score0.00181EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/04 10:15 a.m.•17 views

CVE-2025-14830

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in JFrog Artifactory Workers allows Cross-Site Scripting XSS.This issue affects Artifactory Workers: from =7.94.0 through 7.117.10...

4.9CVSS0.00274EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/01/03 12:00 a.m.•19 views

The vulnerability of the httpd module implementation in microprogramming software enhances the capabilities of attackers to execute arbitrary commands. This vulnerability is present in TP-Link’s TL-WA850RE V2 and V3 wireless signal amplifiers.

The vulnerability of the httpd module implementation in microprogramming software for TP-Link’s wireless signal amplifiers TL-WA850RE V2 and V3 is related to the lack of measures taken to neutralize certain components. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

7.7CVSS6.1AI score0.00942EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2026/01/01 6:30 p.m.•38 views

CVE-2025-55065

CVE-2025-55065 is a SQL injection flaw (CWE-89) caused by improper neutralization of special elements in SQL commands. Connected sources reference Kopek Reem ReKord Client and general SQLi impact; no concrete affected versions or patches are specified in the provided documents. Exploitation detai...

7.5CVSS7.3AI score0.00287EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/01 6:30 p.m.•20 views

EUVD-2026-0005

CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

7.5CVSS7.3AI score0.00287EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/01 1:34 p.m.•16 views

CVE-2025-49357

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in audiomack Audiomack audiomack allows Stored XSS.This issue affects Audiomack: from n/a through = 1.4.8...

6.5CVSS5.9AI score0.00154EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/01 1:34 p.m.•16 views

CVE-2025-62095

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in neilgee Bootstrap Modals bootstrap-modals allows Stored XSS.This issue affects Bootstrap Modals: from n/a through = 1.3.2...

6.5CVSS5.9AI score0.00188EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/01 12:17 p.m.•26 views

CVE-2025-62752

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kalender.digital Kalender.digital kalender-digital allows DOM-Based XSS.This issue affects Kalender.digital: from n/a through = 1.0.13...

6.5CVSS5.9AI score0.00188EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/01 12:17 p.m.•27 views

CVE-2025-62757

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebMan Design | Oliver Juhas WebMan Amplifier webman-amplifier allows DOM-Based XSS.This issue affects WebMan Amplifier: from n/a through = 1.5.12...

6.5CVSS5.9AI score0.00193EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/01 12:17 p.m.•23 views

CVE-2025-62756

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lvaudore The Moneytizer the-moneytizer allows DOM-Based XSS.This issue affects The Moneytizer: from n/a through = 10.0.9...

6.5CVSS5.9AI score0.00193EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/01 9:12 a.m.•28 views

CVE-2025-63005

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tomas WordPress Tooltips wordpress-tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through = 10.9.3...

6.5CVSS5.9AI score0.00159EPSS
SaveExploits0References1
Rows per page
Query Builder