EUVD-2025-3187

Malicious code in bioql PyPI...

CVE-2025-23449 WordPress Simple shortcode buttons plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Simple shortcode buttons allows Reflected XSS. This issue affects Simple shortcode buttons: from n/a through 1.3.2...

CVE-2025-23449

CVE-2025-23449 is a reflected XSS in the NotFound Simple shortcode buttons of the WordPress Simple Shortcode Buttons plugin, affecting versions n/a–1.3.2. Root cause: improper input neutralization during web page generation. CVSS v3.1 base score 7.1 (HIGH). No explicit public exploit status or re...

WordPress plugin Simple Shortcode Buttons: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

CVE-2025-23449: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in davidpuc Simple shortcode buttons simple-shortcode-buttons allows Reflected XSS.This issue affects Simple shortcode buttons: from n/a through = 1.3.2...

PT-2025-4884

Name of the Vulnerable Software and Affected Versions NotFound Simple shortcode buttons versions 1.3.2 and earlier Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This enables attackers to inject...