1201
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thorsten Krug Multilang Contact Form allows Reflected XSS.This issue affects Multilang Contact Fo…
|
CWE-79
Cross-site Scripting
|
CVE-2025-22795
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1202
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bold Bold pagos en linea allows DOM-Based XSS.This issue affects Bold pagos en linea: from n/a th…
|
CWE-79
Cross-site Scripting
|
CVE-2025-22793
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1203
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codexpert, Inc CoDesigner WooCommerce Builder for Elementor allows Stored XSS.This issue affects …
|
CWE-79
Cross-site Scripting
|
CVE-2025-22788
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1204
|
- |
|
-
|
-
|
Missing Authorization vulnerability in bPlugins LLC Button Block allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Button Block: from n/a through 1.1.5.
|
CWE-862
Missing Authorization
|
CVE-2025-22787
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1205
|
- |
|
-
|
-
|
Path Traversal vulnerability in ElementInvader ElementInvader Addons for Elementor allows PHP Local File Inclusion.This issue affects ElementInvader Addons for Elementor: from n/a through 1.2.6.
|
CWE-35
Path Traversal: '.../...//'
|
CVE-2025-22786
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1206
|
- |
|
-
|
-
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ComMotion Course Booking System allows SQL Injection.This issue affects Course Booking System: fr…
|
CWE-89
SQL Injection
|
CVE-2025-22785
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1207
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in Johan Ström Background Control allows Path Traversal.This issue affects Background Control: from n/a through 1.0.5.
|
CWE-352
Origin Validation Error
|
CVE-2025-22784
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1208
|
- |
|
-
|
-
|
Unrestricted Upload of File with Dangerous Type vulnerability in Web Ready Now WR Price List Manager For Woocommerce allows Upload a Web Shell to a Web Server.This issue affects WR Price List Manager…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2025-22782
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1209
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nativery Developer Nativery allows DOM-Based XSS.This issue affects Nativery: from n/a through 0.…
|
CWE-79
Cross-site Scripting
|
CVE-2025-22781
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1210
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexey Yuzhakov wp-pano allows Stored XSS.This issue affects wp-pano: from n/a through 1.17.
|
CWE-79
Cross-site Scripting
|
CVE-2025-22780
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|