8909 matches found
WordPress plugin WP jQuery DataTable 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...
WordPress plugin Ultimate Blocks 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-20191 · Unknown · Dofollow Case By Case
Name of the Vulnerable Software and Affected Versions: DoFollow Case by Case versions through 3.5.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...
BOINC Server 安全漏洞
BOINC Server is an open source distributed computing platform server from the US-based BOINC organization for creating and managing volunteer computing projects. A security vulnerability exists in BOINC Server versions prior to 1.4.5, which stems from improper input neutralization during web page...
PT-2025-20170 · Unknown · Really Simple Under Construction Page
Name of the Vulnerable Software and Affected Versions: Really Simple Under Construction Page versions 1.4.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...
PT-2025-20144 · Unknown · Aweos Wp Lock
Name of the Vulnerable Software and Affected Versions: AWEOS WP Lock versions 1.4.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious...
PT-2025-20109 · Unknown · Skt Skill Bar
Name of the Vulnerable Software and Affected Versions: SKT Skill Bar versions n/a through 2.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious scrip...
WordPress plugin Submission DOM tracking for Contact Form 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...
PT-2025-20080 · Unknown · Cc Bmi Calculator
Name of the Vulnerable Software and Affected Versions: CC BMI Calculator versions n/a through 2.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...
CVE-2025-22476
Dell Storage Center (Dell Storage Manager) 20.1.20 is affected by a Command Injection vulnerability (Improper Neutralization of Special Elements in commands). A low-privileged attacker with adjacent network access could potentially achieve remote code execution. The PT-2025-19884 document confirm...
CVE-2025-0984
Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Netoloji Software E-Flow allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS, File Content Injection. This issue...
CVE-2025-0984 Arbitrary File Upload in Netoloji Software's E-Flow
Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Netoloji Software E-Flow allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS, File Content Injection. This issue...
Improper Neutralization Of Escape, Meta, Or Control Sequences
Apache Tomcat is vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences. The vulnerability is due to certain uncommon rewrite rule configurations, specially crafted requests to bypass these rules, which allows an attacker to circumvent security constraints enforced by them...
CVE-2025-2488
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Profelis Informatics SambaBox allows Cross-Site Scripting XSS. This issue affects SambaBox: before 5.1...
CVE-2025-2488
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Profelis Informatics SambaBox allows Cross-Site Scripting XSS.This issue affects SambaBox: before 5.1...
CVE-2025-1301
CVE-2025-1301 — Reflected XSS in Yordam Informatics Library Automation System . The vulnerability stems from improper neutralization of input during web page generation and affects Library Automation System versions prior to 21.6. Reported impact is a reflected XSS vulnerability. Remediation: upg...
Yordam Library Automation System 跨站脚本漏洞
Yordam Library Automation System is an application from Yordam, Inc. A cross-site scripting vulnerability exists in Yordam Library Automation System prior to version 21.6 that stems from improper input neutralization and could lead to a reflective cross-site scripting attack...
The vulnerability of the vaultwarden password management service lies in the improper elimination of certain elements in the output data, allowing a hacker to execute arbitrary code.
The vulnerability of the vaultwarden password management service is related to incorrect neutralization of certain elements in the output data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
IBM i Content Neutralization Misconduct Vulnerability
IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. IBM i suffers from a Content Neutralization Malpractice vulnerability that originates from a HTTP header Content Neutralization Malpractice, which can be exploited by a...
