CVE-2025-47441

CVE-2025-47441 describes a stored XSS in WordPress Progress Bar (

CVE-2025-47441: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chris Reynolds Progress Bar progress-bar allows Stored XSS.This issue affects Progress Bar: from n/a through = 2.2.3...

WordPress plugin Progress Bar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-20079 · Unknown · Chris Reynolds Progress Bar

Name of the Vulnerable Software and Affected Versions: Chris Reynolds Progress Bar versions through 2.2.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to...

CVE-2024-11142 CSRF in Gosoft Software's Proticaret E-Commerce

Cross-Site Request Forgery CSRF vulnerability in Gosoft Software Proticaret E-Commerce allows Cross Site Request Forgery. This issue affects Proticaret E-Commerce: before v6.0 NOTE: According to the vendor, fixing process is still ongoing for v4.05...

PT-2025-22212

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel. The problem occurs when a CL/CSD job times out, and the GPU has made progress since the last timeout. In such cases, the rese...

UBUNTU-CVE-2022-49782

In the Linux kernel, the following vulnerability has been resolved: perf: Improve missing SIGTRAP checking To catch missing SIGTRAP we employ a WARN in perfeventoverflow, which fires if pendingsigtrap was already set: returning to user space without consuming pendingsigtrap, and then having the...

CVE-2025-28009

A SQL Injection vulnerability exists in the u parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20...

CVE-2025-39516

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alan Petersen Author WIP Progress Bar author-work-in-progress-bar allows DOM-Based XSS.This issue affects Author WIP Progress Bar: from n/a through = 1.0...

Exploit for Code Injection in Foxcms

CVE-2025-29306 - FoxCMS Remote Code Execution Exploit !Pytho...

Malicious code in @sporta-technology/d11-web-components.progress-line (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @sporta-technology/d11-web-components.progress-circle (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-28009

A SQL Injection vulnerability exists in the u parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20...

CVE-2025-28009

A SQL Injection vulnerability exists in the u parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20...

PT-2025-17222 · Unknown · Dietiqa App

Name of the Vulnerable Software and Affected Versions: Dietiqa App version 1.0.20 Description: A SQL Injection issue exists in the u parameter of the "progress-body-weight.php" endpoint. Recommendations: For Dietiqa App version 1.0.20, avoid using the u parameter in the "progress-body-weight.php"...

CVE-2025-28009

A SQL Injection vulnerability exists in the Dietiqa App v1.0.20 (by Appventure Sdn Bhd). The flaw is located in the u parameter of the progress-body-weight.php endpoint due to unsanitized input , which allows an unauthenticated remote attacker to inject arbitrary SQL queries into the backend data...

CVE-2025-28009

A SQL Injection vulnerability exists in the u parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20...

CVE-2025-28009: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in the u parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20...

Belanjawan Dietiqa 安全漏洞

Belanjawan Dietiqa is a mobile weight loss application from Belanjawan. A security vulnerability exists in Belanjawan Dietiqa version 1.0.20, which stems from improper handling of parameter u in the progress-body-weight.php endpoint, which could lead to SQL injection...

CVE-2025-39516

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alan Petersen Author WIP Progress Bar author-work-in-progress-bar allows DOM-Based XSS.This issue affects Author WIP Progress Bar: from n/a through = 1.0...