CVE-2025-58855

Improper Neutralization of Formula Elements in a CSV File vulnerability in Denis V Artprima AP HoneyPot WordPress Plugin ap-honeypot allows Reflected XSS.This issue affects AP HoneyPot WordPress Plugin: from n/a through = 1.4...

CVE-2025-8695

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Netcad NetGIS Server allows Reflected XSS.This issue affects NetGIS Server: from 5.2.4 through 22.08.2025...

CVE-2025-58855

Improper Neutralization of Formula Elements in a CSV File vulnerability in Denis V Artprima AP HoneyPot WordPress Plugin ap-honeypot allows Reflected XSS.This issue affects AP HoneyPot WordPress Plugin: from n/a through = 1.4...

CVE-2025-58848

Cross-Site Request Forgery CSRF vulnerability in aakash1911 WP likes wp-likes allows Reflected XSS.This issue affects WP likes: from n/a through = 3.1.1...

CVE-2025-58845

Cross-Site Request Forgery CSRF vulnerability in ChrisHurst Bulk Watermark bulk-watermark allows Reflected XSS.This issue affects Bulk Watermark: from n/a through = 1.6.10...

CVE-2025-58809

Cross-Site Request Forgery CSRF vulnerability in Nick Ciske To Lead For Salesforce salesforce-wordpress-to-lead allows Reflected XSS.This issue affects To Lead For Salesforce: from n/a through = 2.7.3.9...

CVE-2025-58853

CVE-2025-58853 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Popping Sidebars and Widgets Light (OTWthemes) that enables Reflected XSS. Affected are Popping Sidebars and Widgets Light versions up to 1.27. Public details in connected docs indicate the issue an...

CVE-2025-58847 WordPress WN Flipbox Pro Plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Yaidier WN Flipbox Pro wn-flipbox-pro allows Reflected XSS.This issue affects WN Flipbox Pro: from n/a through = 2.1...

CVE-2025-58846 WordPress WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule Plugin <= 2020.1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Dejan Markovic WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule buffer-my-post allows Reflected XSS.This issue affects WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and...

CVE-2025-58846

CVE-2025-58846 concerns the WordPress Buffer – HYPESocial (WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule) plugin. The issue is a CSRF vulnerability in versions up to 2020.1.0 that also enables reflected XSS, potentially allowing an attacker to trick...

WordPress Toggles Shortcode and Widget plugin <= 1.14 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Toggles Shortcode and Widget versions = 1.14...

PT-2025-36186

Name of the Vulnerable Software and Affected Versions: Yaidier WN Flipbox Pro versions through 2.1 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Yaidier WN Flipbox Pro, which also allows Reflected Cross-Site Scripting XSS. Recommendations: At the moment, there is no...

PT-2025-36148

Name of the Vulnerable Software and Affected Versions: To Lead For Salesforce versions n/a through 2.7.3.9 Description: A Cross-Site Request Forgery CSRF vulnerability exists in To Lead For Salesforce, which also allows Reflected Cross-Site Scripting XSS. Recommendations: Update To Lead For...

CVE-2025-41063 Reflected Cross-Site Scripting vulnerability in appRain CMF

A vulnerability has been discovered in version 4.0.5 of appRain CMF, consisting of an authenticated reflected XSS due to a lack of proper validation of user input, through the 's' parameter in /apprain/developer/debug-log/db...

Linux Distros Unpatched Vulnerability : CVE-2022-0571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site Scripting XSS - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2. CVE-2022-0571 Note that Nessus relies on the...

Exploit for CVE-2025-55998

CVE-2025-55998 Summary | Vulnerability Details | CVE-2025...

CVE-2025-9823 Reflected XSS in lead:addLeadTags - Quick Add

SummaryA Cross-Site Scripting XSS vulnerability allows an attacker to execute arbitrary JavaScript in the context of another user’s session. This occurs because user-supplied input is reflected back in the server’s response without proper sanitization or escaping, potentially enabling malicious...

Cross-Site Scripting (XSS)

Liferay Portal and Liferay DXP are vulnerable to reflected cross-site scripting XSS. The vulnerability is due to improper input handling in the “first display label” field of a custom sort widget configuration, which allows an attacker to inject malicious JavaScript that gets reflected and execut...

Linux Distros Unpatched Vulnerability : CVE-2025-40927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP response splitting flaw in CGI::Simple that...

Linux Distros Unpatched Vulnerability : CVE-2023-34244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 9.4.0 and prior to version 10.0.8, a malicious link can be crafted by an...