17029 matches found
PT-2025-17111 · Unknown · Hamburger Icon Menu Lite
Name of the Vulnerable Software and Affected Versions: Hamburger Icon Menu Lite versions 1.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker ca...
PT-2025-17055 · Unknown · Bjornw File Icons
Name of the Vulnerable Software and Affected Versions: BjornW File Icons versions n/a through 2.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to injec...
PT-2025-17045 · Unknown · Dhanendran Rajagopal Term Taxonomy Converter
Name of the Vulnerable Software and Affected Versions: Dhanendran Rajagopal Term Taxonomy Converter versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means...
PT-2025-17065 · Unknown · Radius Of Thought Page/Post Lister
Name of the Vulnerable Software and Affected Versions: Radius of Thought Page and Post Lister versions 1.2.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...
PT-2025-17073 · Unknown · Graphems List Urls
Name of the Vulnerable Software and Affected Versions: graphems List Urls versions n/a through 0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS in graphems List Urls. Recommendation...
PT-2025-17051 · Unknown · Divspark Flagged Content
Name of the Vulnerable Software and Affected Versions: divspark Flagged Content versions 1.0.0 through 1.0.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacke...
PT-2025-17075 · Deetronix · Deetronix Booking Ultra Pro
Name of the Vulnerable Software and Affected Versions: Deetronix Booking Ultra Pro versions 1.1.19 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...
PT-2025-17123 · Unknown · Mapro Collins Coming Soon Countdown
Name of the Vulnerable Software and Affected Versions: Mapro Collins Coming Soon Countdown versions n/a through 2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...
PT-2025-17131 · Unknown · Rameez Iqbal Real Estate Manager
Name of the Vulnerable Software and Affected Versions: Rameez Iqbal Real Estate Manager versions n/a through 7.3 Description: The issue is related to an Improper Control of Generation of Code, also known as 'Code Injection'. This allows for Code Injection in the Real Estate Manager...
PT-2025-17153
Name of the Vulnerable Software and Affected Versions PickPlugins Question Answer versions 1.2.70 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacke...
PT-2025-17107 · Unknown · Feedify – Web Push Notifications
Name of the Vulnerable Software and Affected Versions: Feedify – Web Push Notifications versions n/a through 2.4.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means that ...
PT-2025-17094 · Jw Player · Ilghera Related Videos
Name of the Vulnerable Software and Affected Versions: ilGhera Related Videos for JW Player versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means a...
PT-2025-16995 · Maros Pristas · Maros Pristas Gravity Forms Css Themes With Fontawesome/Placeholders
Name of the Vulnerable Software and Affected Versions: Maros Pristas Gravity Forms CSS Themes with Fontawesome and Placeholders versions n/a through 8.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing...
PT-2025-17161 · Unknown · Wpwax Helpgent
Name of the Vulnerable Software and Affected Versions: wpWax HelpGent versions n/a through 2.2.4 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 2.2.4, update to a version later than 2.2.4 to resolve...
PT-2025-17206 · Ibm · Ibm I
Name of the Vulnerable Software and Affected Versions: IBM i version 7.6 Description: The issue is related to a privilege escalation due to incorrect profile swapping in an OS command, allowing a malicious actor to gain root access to the host operating system. Recommendations: For IBM i version...
PT-2025-17085 · Silvasoft · Silvasoft Boekhouden
Name of the Vulnerable Software and Affected Versions: Silvasoft boekhouden versions n/a through 3.0.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This means an attacker can...
PT-2025-16989 · WordPress · Wp Social Bookmarking
Name of the Vulnerable Software and Affected Versions: WP Social Bookmarking versions n/a through 3.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in PResponsive WP Social Bookmarking. Recommendations: For versions n/a through 3.6, update to a...
PT-2025-16993 · Unknown · Illow – Cookies Consent
Name of the Vulnerable Software and Affected Versions: illow – Cookies Consent versions 0.2.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions ...
PT-2025-17029 · Unknown · Debounce Email Validator
Name of the Vulnerable Software and Affected Versions: DeBounce Email Validator versions n/a through 5.6.5 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker...
PT-2025-17007 · Unknown · Rajesh Broken Links Remover
Name of the Vulnerable Software and Affected Versions: Rajesh Broken Links Remover versions 1.2.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions 1.2.2 and earlier, update to a version that fixes this issu...