461
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thomas Maier Image Source Control allows Reflected XSS. This issue affects Image Source Control: …
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22711
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
462
|
- |
|
-
|
-
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StoreApps Smart Manager allows Blind SQL Injection. This issue affects Smart Manager: from n/a th…
New
|
CWE-89
SQL Injection
|
CVE-2025-22710
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
463
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soft8Soft LLC Verge3D allows Reflected XSS. This issue affects Verge3D: from n/a through 4.8.0.
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22709
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
464
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iova.mihai Social Pug: Author Box allows Reflected XSS. This issue affects Social Pug: Author Box…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22706
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
465
|
- |
|
-
|
-
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Multiple Carousel allows SQL Injection. This issue affects Multiple Carousel: from n/a t…
New
|
CWE-89
SQL Injection
|
CVE-2025-22553
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
466
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Private Messages for UserPro allows Reflected XSS. This issue affects Private Messages f…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22322
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
467
|
- |
|
-
|
-
|
Missing Authorization vulnerability in Eniture Technology Standard Box Sizes – for WooCommerce. This issue affects Standard Box Sizes – for WooCommerce: from n/a through 1.6.13.
New
|
CWE-862
Missing Authorization
|
CVE-2025-22318
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
468
|
- |
|
-
|
-
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound Private Messages for UserPro. This issue affects Private Messages for…
New
|
CWE-98
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
|
CVE-2025-22311
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
469
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Bonjour Bar allows Stored XSS. This issue affects Bonjour Bar: from n/a through 1.0.0.
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22262
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
470
|
- |
|
-
|
-
|
Improper Encoding or Escaping of Output vulnerability in Poll Maker Team Poll Maker. This issue affects Poll Maker: from n/a through n/a.
New
|
CWE-116
Improper Encoding or Escaping of Output
|
CVE-2024-56277
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|