CVE-2025-9969 Reflected XSS in Vizly Web Design's Real Estate Packages

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Vizly Web Design Real Estate Packages allows Content Spoofing, CAPEC - 593 - Session Hijacking, CAPEC - 591 - Reflected XSS. This issue affects Real Estate Packages: before 5.1...

CVE-2025-9969 Reflected XSS in Vizly Web Design's Real Estate Packages

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Vizly Web Design Real Estate Packages allows Content Spoofing, CAPEC - 593 - Session Hijacking, CAPEC - 591 - Reflected XSS. This issue affects Real Estate Packages: before 5.1...

CVE-2025-9969

CVE-2025-9969 refers to an XSS/Content Spoofing vulnerability in Vizly Web Design Real Estate Packages, with vulnerable versions prior to 5.1. The root cause is improper neutralization of input during web page generation, enabling reflected XSS and related content spoofing risks (CAPEC-591, CAPEC...

CVE-2025-59715

SMSEagle before 6.11 allows reflected XSS via a username or contact phone number...

PT-2025-38589

Name of the Vulnerable Software and Affected Versions StorageGRID versions prior to 11.8.0.15 StorageGRID versions prior to 11.9.0.8 Description StorageGRID formerly StorageGRID Webscale is susceptible to a Reflected Cross-Site Scripting issue. Successful exploitation could allow an attacker to...

PT-2025-38506

Name of the Vulnerable Software and Affected Versions SMSEagle versions prior to 6.11 Description SMSEagle is susceptible to a reflected cross-site scripting XSS issue. The vulnerability occurs through manipulation of a username or contact phone number. Recommendations Update to version 6.11 or...

CVE-2025-30755

OpenGrok 1.14.1 has a reflected Cross-Site Scripting XSS issue when producing the cross reference page. This happens through improper handling of the revision parameter. The application reflects unsanitized user input into the HTML output...

CVE-2024-12796

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Holistic IT, Consultancy Coop. Workcube ERP allows Reflected XSS.This issue affects Workcube ERP: from V12 - V14 before Cognitive...

CVE-2025-6999

An HTTP Request Smuggling CWE-444 vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sanitation and perform a reflected self-Cross-Site Scripting XSS attack.This issue affects Fireware OS: from 12.0 through 12.11.2...

CVE-2025-37122

A vulnerability in the web-based management interface of network access control services could allow an unauthenticated remote attacker to conduct a Reflected Cross-Site Scripting XSS attack. Successful exploitation could allow an attacker to execute arbitrary JavaScript code in a victim's browse...

CVE-2024-12796

CVE-2024-12796 denotes a Reflected XSS in Workcube ERP (Holistic IT, Consultancy Coop.) affecting V12–V14 before Cognitive. Root cause: improper neutralization of input during web page generation. Impact as per sources: Cross-site scripting without user interaction required (AV:N/AC:L/PR:N/UI:N/S...

CVE-2024-12796 Reflected XSS in Holistic IT, Consultancy Coop.'s Workcube ERP

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Holistic IT, Consultancy Coop. Workcube ERP allows Reflected XSS. This issue affects Workcube ERP: from V12 - V14 before Cognitive...

CVE-2025-10546 Cross-Site Scripting (XSS) Vulnerability in PPC XPON ONT Wi-Fi Router

This vulnerability exist in PPC 2K15X Router, due to improper input validation for the Common Gateway Interface CGI parameters at its web management portal. A remote attacker could exploit this vulnerability by injecting malicious JavaScript into the vulnerable parameter, leading to a reflected...

CVE-2025-10546 Cross-Site Scripting (XSS) Vulnerability in PPC XPON ONT Wi-Fi Router

This vulnerability exist in PPC 2K15X Router, due to improper input validation for the Common Gateway Interface CGI parameters at its web management portal. A remote attacker could exploit this vulnerability by injecting malicious JavaScript into the vulnerable parameter, leading to a reflected...

CVE-2025-6575

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dolusoft Omaspot allows Reflected XSS.This issue affects Omaspot: before 12.09.2025...

CVE-2025-6575 XSS in Dolusoft's Omaspot

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dolusoft Omaspot allows Reflected XSS. This issue affects Omaspot: before 12.09.2025...

CVE-2025-6575

CVE-2025-6575 is a reflected XSS in Dolusoft Omaspot caused by improper input neutralization during web page generation. Affected versions are prior to 12.09.2025. Attack vector is network with user interaction required for exploitation; impact is partial confidentiality and integrity concerns as...

PT-2025-37923

Name of the Vulnerable Software and Affected Versions Dolusoft Omaspot versions prior to 12.09.2025 Description Dolusoft Omaspot is susceptible to a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of...

Dolusoft Omaspot 跨站脚本漏洞

Dolusoft Omaspot is a network access management tool from the Turkish company Dolusoft. A cross-site scripting vulnerability exists in Dolusoft Omaspot versions prior to 12.09.2025, which stems from improper input neutralization and could lead to a reflected cross-site scripting attack...

PT-2025-37982

Name of the Vulnerable Software and Affected Versions: Workcube ERP versions V12 through V14 through 20250916 Description: Workcube ERP is susceptible to a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Workcube ERP...