CVE-2025-43954

QMarkdown aka quasar-ui-qmarkdown before 2.0.5 allows XSS via headers even when when no-html is set...

CVE-2025-27287

Deserialization of Untrusted Data vulnerability in ssvadim SS Quiz ssquiz allows Object Injection.This issue affects SS Quiz: from n/a through = 2.0.5...

WordPress plugin Advanced Search by My Solr Server 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Tale Blog 代码注入漏洞

Tale Blog is a Java blog open-sourced by Tale Blog System. A code injection vulnerability exists in Tale Blog version 2.0.5, which originates from cross-site scripting and could lead to remote attacks...

Tale Blog 授权问题漏洞

Tale Blog is a Java blog open-sourced by Tale Blog System. An authorization issue vulnerability exists in Tale Blog version 2.0.5, which stems from improper authentication and could lead to remote attacks...

Tale Blog Cross-Site Scripting Vulnerability

Tale Blog is a Java blog. A cross-site scripting vulnerability exists in Tale Blog version 2.0.5 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data in the logourl parameter of the OptionsService function of...

PT-2025-7671 · Unknown · Otale Tale

Name of the Vulnerable Software and Affected Versions: otale tale versions 2.0.5 and earlier Description: A problem has been found in the function OptionsService of the file src/main/resources/templates/themes/default/partial/header.html. The manipulation of the argument logo url leads to cross...

WordPress plugin Counter Box 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2025-23779

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in web-mv ResAds resads allows SQL Injection.This issue affects ResAds: from n/a through = 2.0.5...

CVE-2025-23664

Cross-Site Request Forgery CSRF vulnerability in Real Seguro Viagem Real Seguro Viagem seguro-viagem allows Stored XSS.This issue affects Real Seguro Viagem: from n/a through = 2.0.5...

CVE-2025-23559

Cross-Site Request Forgery CSRF vulnerability in Stepan Stepasyuk MemeOne allows Stored XSS.This issue affects MemeOne: from n/a through 2.0.5...

CVE-2025-23779

CVE-2025-23779 is an SQL Injection vulnerability in the ResAds WordPress plugin. Affected: ResAds versions n/a through 2.0.5. CVSS 3.1 (base 7.6, HIGH). Network attack vector, requires HIGH privileges, no user interaction, but no exploitation details provided here. Impact: confidentiality HIGH, a...

CVE-2025-23664

CVE-2025-23664 affects Real Seguro Viagem; description specifies CSRF vulnerability that enables Stored XSS in Real Seguro Viagem versions up to 2.0.5 (no vendor/product detail beyond that, n/a for affected version). CVSS 3.1 base 7.1 (High) per the initial metrics; exploitation vector is not det...

CVE-2025-23559

CVE-2025-23559 describes a Cross-Site Request Forgery (CSRF) vulnerability in the MemeOne WordPress plugin that enables Stored XSS. Affected software is MemeOne (versions from n/a through 2.0.5). CVSS v3.1 base score is 7.1 (HIGH). Connected sources confirm the CSRF to Stored XSS scenario, but no...

CVE-2025-23559 WordPress MemeOne plugin <= 2.0.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Stepan Stepasyuk MemeOne allows Stored XSS.This issue affects MemeOne: from n/a through 2.0.5...

WordPress ResAds Plugin <= 2.0.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin ResAds versions = 2.0.5...

WordPress plugin Real Seguro Viagem 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-5006 · Unknown · Real Seguro Viagem

Name of the Vulnerable Software and Affected Versions: Real Seguro Viagem versions n/a through 2.0.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS in Real Seguro Viagem. This means an attacker can perform actions on behalf of a user without...

CVE-2024-56292 WordPress Email Reminders Plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdevelop Email Reminders email-reminders allows Stored XSS.This issue affects Email Reminders: from n/a through = 2.0.5...

PT-2025-3255 · WordPress · Wpdevelop Oplugins Email Reminders

Name of the Vulnerable Software and Affected Versions: wpdevelop oplugins Email Reminders versions n/a through 2.0.5 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS in wpdevelop...