adec56.org Cross Site Scripting vulnerability OBB-4030746

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amorosobaking.com Cross Site Scripting vulnerability OBB-4030742

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

akucode.com Cross Site Scripting vulnerability OBB-4030721

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-57040

creationtimestamp| type| source ---|---|--- 2025-02-26 22:24:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5631 2025-02-26 22:41:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114072595097576184 2025-02-26 23:33:19+00:00| seen|...

CVE-2024-13571

The Post Timeline WordPress plugin before 2.3.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13571

The Post Timeline WordPress plugin before 2.3.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13571 Post Timeline < 2.3.10 - Reflected XSS

The Post Timeline WordPress plugin before 2.3.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13571 Post Timeline < 2.3.10 - Reflected XSS

The Post Timeline WordPress plugin before 2.3.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13571

CVE-2024-13571 affects the Post Timeline WordPress plugin prior to version 2.3.10. The issue is a Reflected Cross-Site Scripting (XSS) caused by insufficient sanitization/escaping of a parameter before it is output on the page, which could be exploited against high-privilege users (e.g., admins)....

WordPress plugin Post Timeline 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-8673 · WordPress · Post Timeline Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Post Timeline WordPress plugin versions prior to 2.3.10 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page...

CVE-2025-26598

creationtimestamp| type| source ---|---|--- 2025-02-25 16:23:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5326 2025-02-25 17:35:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114065731196406120 2025-02-25 19:03:37+00:00| seen| https://t.me/cvedetector/18898 2025-02-26...

CVE-2025-1403

creationtimestamp| type| source ---|---|--- 2025-02-21 17:18:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4917 2025-02-21 18:30:59+00:00| published-proof-of-concept| Telegram/jfTnJZZ5uFqsUFFPSgzOmVcBPm9fNtArLaitrRuQl86f-A 2025-02-21 19:07:13+00:00| seen|...

CVE-2025-26754

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Timeline Block timeline-block-block allows Stored XSS.This issue affects Timeline Block: from n/a through = 1.1.1...

CVE-2025-26754

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Timeline Block timeline-block-block allows Stored XSS.This issue affects Timeline Block: from n/a through = 1.1.1...

CVE-2025-23845

creationtimestamp| type| source ---|---|--- 2025-02-17 11:43:18+00:00| seen| https://infosec.exchange/users/cve/statuses/114019047674107538 2025-02-17 12:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liepxywjc72y 2025-02-17 14:02:10+00:00| seen|...

CVE-2025-26754 WordPress Timeline Block plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Timeline Block timeline-block-block allows Stored XSS.This issue affects Timeline Block: from n/a through = 1.1.1...

CVE-2025-26754 WordPress Timeline Block plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Timeline Block timeline-block-block allows Stored XSS.This issue affects Timeline Block: from n/a through = 1.1.1...

CVE-2025-26754

CVE-2025-26754 affects the WordPress Timeline Block plugin (versions n/a through 1.1.1). It is a Stored XSS due to improper input neutralization during web page generation. Affected software: Timeline Block – Timeline Block Plugin for WordPress. Impact: stored script execution in a victim’s brows...

PT-2025-7221 · Unknown · Bplugins Timeline Block

Name of the Vulnerable Software and Affected Versions: bPlugins Timeline Block versions n/a through 1.1.1 Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...