451
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Brizy Pro allows Reflected XSS. This issue affects Brizy Pro: from n/a through 2.6.1.
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22763
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
452
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TaxoPress WordPress Tag Cloud Plugin – Tag Groups allows Reflected XSS. This issue affects WordPr…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22735
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
453
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPHocus My auctions allegro allows Reflected XSS. This issue affects My auctions allegro: from n/…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22733
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
454
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Admiral Ad Blocking Detector allows Stored XSS. This issue affects Ad Blocking Detector: from n/a…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22732
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
455
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS. This issue affects MailChimp Subscribe Fo…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22727
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
456
|
- |
|
-
|
-
|
Unrestricted Upload of File with Dangerous Type vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager allows Upload a Web Shell to a Web Server. This issue affects Barcode Scann…
New
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2025-22723
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
457
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E4J s.r.l. VikAppointments Services Booking Calendar allows Stored XSS. This issue affects VikApp…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22719
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
458
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roninwp FAT Event Lite allows Stored XSS. This issue affects FAT Event Lite: from n/a through 1.1.
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22718
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
459
|
- |
|
-
|
-
|
Missing Authorization vulnerability in Joe Dolson My Tickets allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects My Tickets: from n/a through 2.0.9.
New
|
CWE-862
Missing Authorization
|
CVE-2025-22717
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
460
|
- |
|
-
|
-
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Team Taskbuilder allows SQL Injection. This issue affects Taskbuilder: from n/a throu…
New
|
CWE-89
SQL Injection
|
CVE-2025-22716
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|