CVE-2025-34409 MailEnable < 10.54 Reflected XSS in Failed Parameter of MAI/AddRecipientsResult.aspx

MailEnable versions prior to 10.54 contain a reflected cross-site scripting XSS vulnerability in the Failed parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx. The Failed value is not properly sanitized when processed via a GET request and is reflected in the response, allowing an...

CVE-2024-44009

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WC Lovers WCFM Marketplace allows Reflected XSS.This issue affects WCFM Marketplace: from n/a through 3.6.10...

CVE-2024-43276

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Svetoslav Marinov Slavi Child Theme Creator allows Reflected XSS.This issue affects Child Theme Creator: from n/a through 1.5.4...