CVE-2025-65790

A reflected cross-site scripting XSS vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file manager interface. FuguHub does not sanitize or restrict script execution inside SVG content. When a victim opens a crafted SVG containing an inline element, the browser executes...

CVE-2024-25812

MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the src parameter...

CVE-2025-65270

Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...

CVE-2025-12398

The Product Table for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchkey' parameter in all versions up to, and including, 5.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2024-25814

The MyNET online management system (developed by AIRC Portugal ) is vulnerable to a reflected cross-site scripting (XSS) flaw in versions up to v26.05 . The issue stems from improper neutralization of input via the msg parameter , which could allow an attacker to inject malicious scripts into web...

CVE-2025-65790: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file manager interface. FuguHub does not sanitize or restrict script execution inside SVG content. When a victim opens a crafted SVG containing an inline...

CVE-2024-35321: Improper Neutralization of Input During Web Page Generation

MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting XSS vulnerability via the msgtipo parameter...

CVE-2024-25814: Improper Neutralization of Input During Web Page Generation

MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the msg parameter...

CVE-2025-65790

A reflected cross-site scripting (XSS) vulnerability exists in FuguHub 8.1 due to the lack of sanitization or script filtering when serving SVG files through the /fs/ file manager interface. The software treats SVG files as active XML content, allowing the browser to execute inline [removed] elem...

CVE-2025-65270

Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...

CVE-2024-35321

MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting XSS vulnerability via the msgtipo parameter...

CVE-2024-35321

The MyNET online management system (by AIRC Portugal ) versions up to v26.08 are vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The vulnerability is triggered via the msgtipo parameter, which fails to properly neutralize input during web page generation. A successful exploit could all...

CVE-2024-25814

MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the msg parameter...

CVE-2025-65270: Improper Neutralization of Input During Web Page Generation

Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...

CVE-2024-25812: Improper Neutralization of Input During Web Page Generation

MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the src parameter...

AIRC MyNET security vulnerability

AIRC MyNET is a specialized online management system from AIRC Portugal. A security vulnerability exists in AIRC MyNET v26.08 and earlier versions, which stems from a reflected cross-site scripting issue with the msgtipo parameter...

CVE-2025-12398

CVE-2025-12398 affects the WordPress plugin “Product Table for WooCommerce.” The vulnerability is a Reflected Cross-Site Scripting via the search_key parameter. It affects all versions up to 5.0.8 due to insufficient input sanitization and output escaping. The provided Connected documents confirm...

CVE-2025-12398 Product Table for WooCommerce <= 5.0.8 - Reflected Cross-Site Scripting

The Product Table for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchkey' parameter in all versions up to, and including, 5.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2025-12398 Product Table for WooCommerce <= 5.0.8 - Reflected Cross-Site Scripting

The Product Table for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchkey' parameter in all versions up to, and including, 5.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2025-12398: Improper Neutralization of Input During Web Page Generation

The Product Table for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchkey' parameter in all versions up to, and including, 5.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...