CVE-2025-54055

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Druco druco allows Reflected XSS.This issue affects Druco: from n/a through = 1.5.2...

CVE-2025-48296

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup UpStore upstore allows Reflected XSS.This issue affects UpStore: from n/a through = 1.7.0...

CVE-2025-48296

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup UpStore upstore allows Reflected XSS.This issue affects UpStore: from n/a through = 1.7.0...

CVE-2025-54055

CVE-2025-54055 is a Reflected XSS in WordPress theme Druco (skygroup Druco) up to version 1.5.2, caused by improper input neutralization during web page generation. Affected: Druco (skygroup) WordPress Theme up to 1.5.2. Impact per sources: allow execution of attacker-controlled scripts in the vi...

PT-2025-34017 · Skygroup · Druco

Name of the Vulnerable Software and Affected Versions: skygroup Druco versions through 1.5.2 Description: Improper neutralization of input during web page generation allows reflected cross-site scripting XSS. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-33928 · Skygroup · Skygroup Upstore

Name of the Vulnerable Software and Affected Versions: skygroup UpStore versions through 1.7.0 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to Reflected Cross-site Scripting XSS. Recommendations: At the moment, there is no...