CVE-2025-28865

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lionelroux WP Colorful Tag Cloud wp-colorful-tag-cloud allows Reflected XSS.This issue affects WP Colorful Tag Cloud: from n/a through = 2.0.1...

WordPress plugin Better Section Navigation Widget has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

CVE-2025-28865

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lionelroux WP Colorful Tag Cloud wp-colorful-tag-cloud allows Reflected XSS.This issue affects WP Colorful Tag Cloud: from n/a through = 2.0.1...

CVE-2025-28865

CVE-2025-28865 affects WP Colorful Tag Cloud (WordPress plugin) up to version 2.0.1, with a Reflected XSS due to improper input neutralization during web page generation. CVSSv3.1 base score 7.1 (HIGH). The connected documents confirm the XSS vector but do not provide a confirmed fix version or p...

CVE-2025-28865 WordPress WP Colorful Tag Cloud plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lionelroux WP Colorful Tag Cloud wp-colorful-tag-cloud allows Reflected XSS.This issue affects WP Colorful Tag Cloud: from n/a through = 2.0.1...

CVE-2025-28865: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lionelroux WP Colorful Tag Cloud wp-colorful-tag-cloud allows Reflected XSS.This issue affects WP Colorful Tag Cloud: from n/a through = 2.0.1...

PT-2025-12946

Name of the Vulnerable Software and Affected Versions WP Colorful Tag Cloud versions through 2.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to injec...

WordPress plugin WP Colorful Tag Cloud has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...

Inaba Denki Sangyo CHOCO TEI WATCHER mini

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to obtain the product's login password, gain unauthorized access, tamper with product's data, and/or modify product settings. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...

WordPress WP Colorful Tag Cloud plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP Colorful Tag Cloud versions = 2.0.1...

SimpleOne Platform HTML Injection

The vulnerability of SimpleOne Platform’s software lies in the lack of measures taken to eliminate scipt-related HTML tags on web pages. Exploiting this vulnerability allows a remote attacker to inject an HTML tag that includes a link to an external resource...

Linux nvme_alloc_admin_tag_set Heap Buffer Overflow DoS

The vulnerability of the nvmeallocadmintagset function in the drivers/nvme/host/core.c file of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-7776

The CVE-2024-7776 issue affects the ONNX framework (onnx) in the download_model path, vulnerable in versions up to and including 1.16.1. The root cause is inadequate prevention of path traversal in tar files, allowing an attacker to overwrite arbitrary files in the user’s directory, with potentia...

CVE-2024-11824 Stored XSS in langgenius/dify

A stored cross-site scripting XSS vulnerability exists in langgenius/dify version latest, specifically in the chat log functionality. The vulnerability arises because certain HTML tags like and are not disallowed, allowing an attacker to inject malicious HTML into the log via prompts. When an adm...

Dify Cross-Site Scripting Vulnerability

dify is an open source LLM application development platform from LangGenius Open Source. A cross-site scripting vulnerability exists in dify, which stems from an undisabled HTML tag and could lead to a stored cross-site scripting attack...

PT-2025-12013

Name of the Vulnerable Software and Affected Versions The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress versions up to, and including, 1.4.6.8 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping in the...

Malicious code in tag-soup-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c6f3d943d58e767428be21a9044b8969fbf56027da115be523bd13e0af23d36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2542 Malicious code in tag-soup-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c6f3d943d58e767428be21a9044b8969fbf56027da115be523bd13e0af23d36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RLSA-2025:1210 Moderate: tbb security update

Threading Building Blocks TBB is a C++ runtime library that abstracts the low-level threading details necessary for optimal multi-core performance. Security Fixes: jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 For more details about the securit...

Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2025-1272)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...