6001 matches found
CVE-2025-9371 Betheme <= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title'
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pagetitle’ parameter in all versions up to, and including, 28.1.6 due to insufficient input sanitization and output escaping of theme breadcrumbs. This makes it possible for authenticated attackers, with...
CVE-2025-9371 Betheme <= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title'
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pagetitle’ parameter in all versions up to, and including, 28.1.6 due to insufficient input sanitization and output escaping of theme breadcrumbs. This makes it possible for authenticated attackers, with...
CVE-2025-9371
CVE-2025-9371 corresponds to Betheme (WordPress) with a Stored XSS via the page_title parameter. Affected versions are up to 28.1.6; PT-security notes 28.1.7+ as the fix, and Patchstack confirms Authenticated (Contributor+) Stored Cross-Site Scripting via page_title with Betheme
EUVD-2025-33331
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pagetitle’ parameter in all versions up to, and including, 28.1.6 due to insufficient input sanitization and output escaping of theme breadcrumbs. This makes it possible for authenticated attackers, with...
WordPress plugin Betheme 跨站脚本漏洞
WordPress Betheme plugin is a WordPress multipurpose theme that is mainly used to quickly build different types of websites such as corporate, blog, e-commerce and so on. WordPress Betheme plugin suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and outp...
PT-2025-41373
Name of the Vulnerable Software and Affected Versions Betheme theme for WordPress versions prior to 28.1.7 Description The theme is susceptible to Stored Cross-Site Scripting through the page title parameter. Insufficient input sanitization and output escaping in theme breadcrumbs allow...
WordPress Betheme plugin <= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title' vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via 'pagetitle' vulnerability discovered by Zbigniew Piotrak in WordPress Theme Betheme versions = 28.1.6...
CVE-2025-11279
A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. This issue affects some unknown processing of the component Add Work Item Page. The manipulation of the argument Title results in csv injection. The attack can be launched remotely. The exploit is now public and may be...
EUVD-2003-0060
Malware in sbrugna...
EUVD-2003-0061
Malware in sbrugna...
EUVD-2006-6630
Malware in sbrugna...
EUVD-2020-17806
Malware in sbrugna...
EUVD-2005-0879
Malware in sbrugna...
EUVD-2020-5543
Malware in sbrugna...
EUVD-2021-19055
Malware in sbrugna...
EUVD-2010-5306
Malware in sbrugna...
EUVD-2020-23408
Malware in sbrugna...
EUVD-2013-5155
Malware in sbrugna...