CVE-2025-48245

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal Quick Contact Form quick-contact-form allows Reflected XSS.This issue affects Quick Contact Form: from n/a through = 8.2.1...

CVE-2025-47673

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Reflected XSS.This issue affects Arconix Shortcodes: from n/a through = 2.1.16...

CVE-2025-47613

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0...

CVE-2025-46487

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sftranna EC Authorize.net ec-authorizenet allows Reflected XSS.This issue affects EC Authorize.net: from n/a through = 0.3.3...

CVE-2025-46448

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in reifsnyderb Document Management System dms allows Reflected XSS.This issue affects Document Management System: from n/a through = 1.24...

CVE-2025-46437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tayoricom Tayori Form tayori allows Reflected XSS.This issue affects Tayori Form: from n/a through = 1.2.9...

CVE-2025-46440

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark kStats Reloaded kstats-reloaded allows Reflected XSS.This issue affects kStats Reloaded: from n/a through = 0.7.4...

CVE-2025-39502

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GoodLayers Goodlayers Hostel gdlr-hostel allows Reflected XSS.This issue affects Goodlayers Hostel: from n/a through = 3.1.2...

CVE-2025-46440

CVE-2025-46440 is a Reflected Cross-Site Scripting vulnerability in WordPress kStats Reloaded (versions <= 0.7.4). The issue is caused by improper input neutralization during web page generation, enabling reflected XSS. Public sources (NVD/Red Hat entries) describe the vulnerability and affect...

CVE-2025-46437

CVE-2025-46437 – Reflected Cross-Site Scripting in the WordPress Tayori Form plugin (versions

CVE-2025-46440 WordPress kStats Reloaded plugin <= 0.7.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mark kStats Reloaded kstats-reloaded allows Reflected XSS.This issue affects kStats Reloaded: from n/a through = 0.7.4...

CVE-2025-46446

CVE-2025-46446: WordPress plugin Libro de Reclamaciones is affected by a Stored XSS due to improper input handling. Affected versions are from n/a through 1.0.1. Connected sources provide no explicit fix version or patch details in the documents; no exploitation status is stated beyond the vulner...

CVE-2025-46515 WordPress Category Widget plugin <= 2.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in M A Vinoth Kumar Category Widget category-widget allows Reflected XSS.This issue affects Category Widget: from n/a through = 2.0.2...

CVE-2025-47458 WordPress B2i Investor Tools plugin <= 1.0.7.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in B2itech B2i Investor Tools allows Reflected XSS. This issue affects B2i Investor Tools: from n/a through 1.0.7.9...

CVE-2025-47458

CVE-2025-47458 refers to a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin B2i Investor Tools . The issue arises from improper input neutralization during web page generation and affects the plugin in versions up to and including 1.0.7.9 . Connected sources corroborate ...

CVE-2025-47599

CVE-2025-47599: WordPress Facturante plugin

CVE-2025-47611

CVE-2025-47611 reflects a Reflected Cross-Site Scripting (XSS) flaw in the WordPress plugin User Meta (versions n/a through 3.1.2). Root cause: improper input neutralization during web page generation. Impact (per metrics): confidentiality, integrity, and availability are Low to Low, with user in...

CVE-2025-47680 WordPress xili-tidy-tags plugin <= 1.12.06 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michel - xiligroup dev xili-tidy-tags allows Reflected XSS. This issue affects xili-tidy-tags: from n/a through 1.12.06...

CVE-2025-24721

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Aleksandar Urošević Easy YouTube Gallery easy-youtube-gallery allows Stored XSS.This issue affects Easy YouTube Gallery: from n/a through = 1.0.4...

CVE-2025-24746

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel Iser Popup Maker popup-maker allows Stored XSS.This issue affects Popup Maker: from n/a through = 1.20.2...