Lucene search
+L

3079 matches found

Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•23 views

PT-2025-54306

Name of the Vulnerable Software and Affected Versions landwire Responsive Block Control versions through 1.2.9 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-Site Scripting issue. This allows for the potential...

6.5CVSS6.1AI score0.00193EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•17 views

WordPress plugin Responsive Block Control 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00193EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•7 views

CVE-2025-62135: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in landwire Responsive Block Control responsive-block-control allows DOM-Based XSS.This issue affects Responsive Block Control: from n/a through = 1.3.0...

6.5CVSS5.8AI score0.00193EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/31 12:00 a.m.•25 views

WordPress Responsive Lightbox & Gallery plugin <= 2.4.7 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library vulnerability

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via Featherlight.js JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin Responsive Lightbox versions = 2.4.7...

6.4CVSS8.1AI score0.00331EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/12/30 12:30 p.m.•19 views

EUVD-2025-205740

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows PHP Local File Inclusion.This issue affects Responsive Posts Carousel Pro: from n/a through = 15...

7.5CVSS6.6AI score0.00445EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/30 10:47 a.m.•27 views

CVE-2025-68996

CVE-2025-68996 corresponds to an authenticated Local File Inclusion in the WordPress plugin Responsive Posts Carousel Pro (

7.5CVSS5.8AI score0.00445EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/30 10:47 a.m.•49 views

CVE-2025-68996 WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows PHP Local File Inclusion.This issue affects Responsive Posts Carousel Pro: from n/a through = 15...

7.5CVSS0.00445EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•20 views

WordPress plugin Responsive Posts Carousel Pro 安全漏洞

...

7.5CVSS5.8AI score0.00445EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•5 views

CVE-2025-68996: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows PHP Local File Inclusion.This issue affects Responsive Posts Carousel Pro: from n/a through = 15...

7.5CVSS5.8AI score0.00445EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/28 6:02 a.m.•16 views

CVE-2025-15123 JeecgBoot datarule improper authorization

A vulnerability was determined in JeecgBoot up to 3.9.0. This affects an unknown function of the file /sys/sysDepartPermission/datarule/. Executing manipulation can lead to improper authorization. It is possible to launch the attack remotely. The attack requires a high level of complexity. The...

2.3CVSS5.3AI score
SaveExploits0References6
EUVD
EUVD
•added 2025/12/27 9:30 a.m.•31 views

EUVD-2025-205469

A security flaw has been discovered in getmaxun maxun up to 0.0.28. Impacted is an unknown function of the file /getmaxun/maxun/blob/develop/server/src/routes/auth.ts. Performing manipulation of the argument apikey results in use of hard-coded cryptographic key . Remote exploitation of the attack...

6.3CVSS5.9AI score0.00537EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/12/26 1:02 a.m.•24 views

EUVD-2025-205407

A security flaw has been discovered in sunkaifei FlyCMS up to abbaa5a8daefb146ad4d61027035026b052cb414. The affected element is an unknown function of the file src/main/java/com/flycms/web/system/IndexAdminController.java of the component Admin Login. Performing manipulation of the argument...

5.3CVSS5.1AI score0.00407EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•15 views

CVE-2025-67632

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The Plugin Factory Google AdSense for Responsive Design – GARD google-adsense-for-responsive-design-gard allows DOM-Based XSS.This issue affects Google AdSense for Responsive Design – GARD: from n/...

5.9CVSS5.2AI score0.0021EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•28 views

EUVD-2025-205275

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The Plugin Factory Google AdSense for Responsive Design GARD google-adsense-for-responsive-design-gard allows DOM-Based XSS.This issue affects Google AdSense for Responsive Design GARD: from n/a...

6.1CVSS5.9AI score0.0021EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/24 1:16 p.m.•15 views

CVE-2025-67632

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The Plugin Factory Google AdSense for Responsive Design – GARD google-adsense-for-responsive-design-gard allows DOM-Based XSS.This issue affects Google AdSense for Responsive Design – GARD: from n/...

5.9CVSS0.0021EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/24 1:10 p.m.•54 views

CVE-2025-67632 WordPress Google AdSense for Responsive Design – GARD plugin <= 2.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The Plugin Factory Google AdSense for Responsive Design – GARD google-adsense-for-responsive-design-gard allows DOM-Based XSS.This issue affects Google AdSense for Responsive Design – GARD: from n/...

5.9CVSS0.0021EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/24 1:10 p.m.•10 views

CVE-2025-67632 WordPress Google AdSense for Responsive Design – GARD plugin <= 2.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The Plugin Factory Google AdSense for Responsive Design GARD google-adsense-for-responsive-design-gard allows DOM-Based XSS.This issue affects Google AdSense for Responsive Design GARD: from n/a...

5.9CVSS5.9AI score0.0021EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/24 1:10 p.m.•29 views

CVE-2025-67632

CVE-2025-67632 affects Google AdSense for Responsive Design (GARD) in The Plugin Factory; it is a DOM-Based XSS vulnerability triggered by improper input neutralization during web page generation. Affected: google-adsense-for-responsive-design-gard; vulnerable from n/a through

5.9CVSS5.9AI score0.0021EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/24 12:32 p.m.•20 views

CVE-2025-68548

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows Stored XSS.This issue affects Responsive Posts Carousel Pro: from n/a through = 15.2...

6.5CVSS5.9AI score0.00159EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•17 views

PT-2025-53248

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The Plugin Factory Google AdSense for Responsive Design GARD google-adsense-for-responsive-design-gard allows DOM-Based XSS.This issue affects Google AdSense for Responsive Design GARD: from n/a...

6.1CVSS6.4AI score0.0021EPSS
SaveExploits0References2
Rows per page
Query Builder