389 matches found
PT-2025-5198 · Unknown · Ella Van Durpe Slides & Presentations
Name of the Vulnerable Software and Affected Versions: Ella van Durpe Slides & Presentations versions 0.0.0 through 0.0.39 Description: The issue is related to the improper neutralization of script-related HTML tags in a web page, which allows for code injection. This is a basic Cross-Site...
WordPress Posts Footer Manager Plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Pham Van Tam Patchstack Alliance in WordPress Plugin Posts Footer Manager versions = 2.1.0...
CVE-2025-22534
Missing Authorization vulnerability in Ella Van Durpe Slides & Presentations slide allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slides & Presentations: from n/a through = 0.0.39...
CVE-2025-22511
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ella Van Durpe Slides & Presentations slide allows Stored XSS.This issue affects Slides & Presentations: from n/a through = 0.0.39...
CVE-2025-22511 WordPress Slides & Presentations Plugin <= 0.0.39 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ella Van Durpe Slides & Presentations slide allows Stored XSS.This issue affects Slides & Presentations: from n/a through = 0.0.39...
WordPress WP Cookie plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Pham Van Tam Patchstack Alliance in WordPress Plugin WP Cookie versions = 1.0.0...
PT-2025-4525 · Unknown · Ella Van Durpe Slides & Presentations
Name of the Vulnerable Software and Affected Versions: Ella van Durpe Slides & Presentations versions 0.0.0 through 0.0.39 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: Fo...
PT-2025-4504 · Unknown · Ella Van Durpe Slides & Presentations
Name of the Vulnerable Software and Affected Versions: Ella van Durpe Slides & Presentations versions 0.0.0 through 0.0.39 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacke...
WordPress Indeed Ultimate Learning Pro plugin <= 3.9 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Pham Van Tam Patchstack Alliance in WordPress Plugin Ultimate Learning Pro versions = 3.9...
WordPress Highlight plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Pham Van Tam Patchstack Alliance in WordPress Plugin Highlight versions = 2.0.2...
PT-2025-52662
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to platform/x86/amd/pmc support for the Van Gogh SoC. Specifically, the ROG Xbox Ally non-X SoC, which shares a similar architecture with the Ste...
CVE-2024-49673
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Van Abel LaTeX2HTML allows Reflected XSS.This issue affects LaTeX2HTML: from n/a through 2.5.4...
CVE-2024-49673
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Van Abel LaTeX2HTML latex2html allows Reflected XSS.This issue affects LaTeX2HTML: from n/a through = 2.5.4...
CVE-2024-49673 WordPress LaTeX2HTML plugin <= 2.5.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Van Abel LaTeX2HTML latex2html allows Reflected XSS.This issue affects LaTeX2HTML: from n/a through = 2.5.4...
CVE-2024-49673
CVE-2024-49673 concerns the WordPress LaTeX2HTML plugin where the vulnerability is a reflected Cross-Site Scripting (XSS) in versions n/a through 2.5.4. The issue is described as improper input neutralization during web page generation. Public sources in connected documents indicate the vulnerabi...
CVE-2024-44051
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Johan van der Wijk Content Blocks Custom Post Widget allows Stored XSS.This issue affects Content Blocks Custom Post Widget: from n/a through 3.3.5...
CVE-2024-44051
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Johan van der Wijk Content Blocks Custom Post Widget custom-post-widget allows Stored XSS.This issue affects Content Blocks Custom Post Widget: from n/a through = 3.3.5...
CVE-2024-44051 WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Johan van der Wijk Content Blocks Custom Post Widget custom-post-widget allows Stored XSS.This issue affects Content Blocks Custom Post Widget: from n/a through = 3.3.5...
WordPress KiviCare plugin <= 3.6.6 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Van Lyubov Patchstack Alliance in WordPress Plugin KiviCare versions = 3.6.6...
CVE-2024-34790 WordPress Download ImageMagick Sharpen Resized Images plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Hans van Eijsden,niwreg ImageMagick Sharpen Resized Images allows Stored XSS.This issue affects ImageMagick Sharpen Resized Images: from n/a through 1.1.7...