Lucene search
K

73 matches found

NVD
NVD
added yesterday9 views

CVE-2025-15654

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fox-themes Prague allows Reflected XSS. This issue affects Prague: from n/a through 2.2.8...

7.1CVSS0.00033EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added yesterday1 views

CVE-2025-15654 WordPress Prague plugin <= 2.2.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fox-themes Prague allows Reflected XSS. This issue affects Prague: from n/a through 2.2.8...

7.1CVSS5.8AI score0.00033EPSS
Exploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2025-210045

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fox-themes Prague allows Reflected XSS. This issue affects Prague: from n/a through 2.2.8...

7.1CVSS5.8AI score0.00033EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2025-15654

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fox-themes Prague allows Reflected XSS. This issue affects Prague: from n/a through 2.2.8...

7.1CVSS5.8AI score0.00033EPSS
Exploits0References2
Cvelist
Cvelist
added yesterday26 views

CVE-2025-15654 WordPress Prague plugin <= 2.2.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Fox-themes Prague allows Reflected XSS. This issue affects Prague: from n/a through 2.2.8...

7.1CVSS0.00033EPSS
Exploits0References1
CVE
CVE
added yesterday6 views

CVE-2025-15654

CVE-2025-15654 describes a Reflected XSS in the Fox-themes Prague WordPress plugin (≤ 2.2.8). The root cause is improper neutralization of input during web page generation. Affected software is the Prague plugin, with vulnerable versions listed as up to 2.2.8; the issue is classified with CVSS 3....

7.1CVSS5.8AI score0.00033EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added yesterday4 views

PT-2026-45905

Name of the Vulnerable Software and Affected Versions Fox-themes Prague versions prior to 2.2.9 Description Improper neutralization of input during web page generation allows Reflected Cross-site Scripting XSS, a flaw where an application includes untrusted data in a web page without proper...

7.1CVSS5.8AI score0.00033EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/02/21 7:30 p.m.2 views

CVE-2025-67972

Missing Authorization vulnerability in Zoho Mail Zoho ZeptoMail allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zoho ZeptoMail: from n/a through 3.2.9...

4.3CVSS5.8AI score0.00053EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 4:22 p.m.1 views

CVE-2025-67972

Missing Authorization vulnerability in Zoho Mail Zoho ZeptoMail allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zoho ZeptoMail: from n/a through 3.2.9...

4.3CVSS0.00053EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/20 3:46 p.m.1 views

CVE-2025-67972 WordPress Zoho ZeptoMail plugin <= 3.2.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Zoho Mail Zoho ZeptoMail allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zoho ZeptoMail: from n/a through 3.2.9...

4.3CVSS5.8AI score0.00053EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/20 3:46 p.m.17 views

CVE-2025-67972 WordPress Zoho ZeptoMail plugin <= 3.2.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Zoho Mail Zoho ZeptoMail allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zoho ZeptoMail: from n/a through 3.2.9...

4.3CVSS0.00053EPSS
Exploits0References1
CVE
CVE
added 2026/02/20 3:46 p.m.5 views

CVE-2025-67972

Technical details about CVE-2025-67972 are not provided in the connected documents. Public details in the set pertain to other products (e.g., Prague plugin) and do not confirm affected vendor/version/root-cause for Zoho ZeptoMail. Monitor for updates.

4.3CVSS5.8AI score0.00053EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.2 views

WordPress plugin Prague 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

4.3CVSS5.7AI score0.00053EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.3 views

PT-2026-21046

Name of the Vulnerable Software and Affected Versions Prague versions through 2.2.8 Description A Reflected Cross-site Scripting XSS issue exists in the Prague prague-plugins component. This occurs due to improper neutralization of input during web page generation. The issue allows for the...

4.3CVSS5.5AI score0.00053EPSS
Exploits0References5
Patchstack
Patchstack
added 2026/01/27 6:49 a.m.3 views

WordPress Prague plugin <= 2.2.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Prague versions = 2.2.8...

7.1CVSS5.9AI score0.00053EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2017-6781

Malware in sbrugna...

9.3CVSS7.7AI score0.00116EPSS
Exploits0References2
HackRead
HackRead
added 2025/06/23 4:16 p.m.2 views

Speaker Proposal Deadline Approaches for OpenSSL Conference 2025 in Prague

Newark, United States, 23rd June 2025, CyberNewsWire...

7.3AI score
Exploits0
Rapid7 Blog
Rapid7 Blog
added 2025/02/10 2:53 p.m.4 views

Interning at Rapid7 Prague: Meet Mko

Mkrtich Hovsepyan – most people call him Mko – is an intern at Rapid7’s fast-growing office in Prague. He graduated from the luminous Charles University in Prague, and is currently a first-year master’s student in Artificial Intelligence there. He was in our first impressive crop of interns, and ...

7.8AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:38 p.m.2 views

Malicious code in down_load_ebook_de_elskende_fra_prag_by_alyson_richman_g4f5c (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
Openbugbounty
Openbugbounty
added 2024/04/22 6:58 p.m.7 views

praguedevils.org Cross Site Scripting vulnerability OBB-3920459

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Rows per page
Query Builder