2025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in activecampaign Act

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rocketelements Spl

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders URL S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Cop

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelCockpit Funn

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in socialintents Soci

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Mitig

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Mitig

A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Affected by this issue is so

gitoxide is an implementation of git written in Rust. Before 0.42.0, gitoxide uses SHA-1 hash implementations without an

A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hutsixdigital Tige

Missing Authorization vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification all

Missing Authorization vulnerability in enituretechnology Pallet Packaging for WooCommerce pallet-packaging-for-woocommer

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in joshix Simplish si

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Oblak Studio Srbtransla

A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as cr

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue a

A vulnerability has been found in PHPGurukul e-Diary Management System 1.0 and classified as critical. This vulnerabilit

A vulnerability, which was classified as problematic, was found in zhangyanbo2007 youkefu up to 4.2.0. This affects an u

A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects some unknown

A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. This vulnerability affects un

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This aff

A server-side request forgery (SSRF) vulnerability exists in the Bitdefender GravityZone Update Server when operating in

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been declared as critical. This vuln

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. Affected by this

Stored XSS in M-Files Web versions from 25.1.14445.5 to 25.2.14524.4 allows an authenticated user to run scripts

The Woffice Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,

A vulnerability has been found in JFinal CMS up to 5.2.4 and classified as problematic. Affected by this vulnerability i

A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affect

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu

The Maps WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting

The Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website pl

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affec

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. Aff

All versions of the package react-draft-wysiwyg are vulnerable to Cross-site Scripting (XSS) via the Embedded button whi

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue a

A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. This vulnerab

A vulnerability, which was classified as critical, was found in CodeAstro Student Grading System 1.0. This affects an un

A vulnerability, which was classified as critical, has been found in CodeAstro Car Rental System 1.0. Affected by this i

A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the func

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the

Weak encoding for password vulnerability exists in HMI ViewJet C-more series. If this vulnerability is exploited, authen

Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI ViewJet C-more series and HMI GC-A2 series, whi

Allocation of resources without limits or throttling issue exists in HMI ViewJet C-more series and HMI GC-A2 series, whi

Improper restriction of rendered UI layers or frames issue exists in HMI ViewJet C-more series, which may allow a remote

User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based)