391
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mahesh Bisen Contact Form 7 – CCAvenue Add-on allows Reflected XSS.This issue affects Contact For…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-23623
|
2025-01-17 05:15 |
2025-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
392
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexey Trofimov Captchelfie – Captcha by Selfie allows Reflected XSS.This issue affects Captchelf…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-23620
|
2025-01-17 05:15 |
2025-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
393
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in Andrea Brandi Twitter Shortcode allows Stored XSS.This issue affects Twitter Shortcode: from n/a through 0.9.
New
|
CWE-352
Origin Validation Error
|
CVE-2025-23618
|
2025-01-17 05:15 |
2025-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
394
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in Oliver Schaal Floatbox Plus allows Stored XSS.This issue affects Floatbox Plus: from n/a through 1.4.4.
New
|
CWE-352
Origin Validation Error
|
CVE-2025-23617
|
2025-01-17 05:15 |
2025-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
395
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in Sourov Amin Word Freshener allows Stored XSS.This issue affects Word Freshener: from n/a through 1.3.
New
|
CWE-352
Origin Validation Error
|
CVE-2025-23577
|
2025-01-17 05:15 |
2025-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
396
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in Sam Burdge WP Background Tile allows Stored XSS.This issue affects WP Background Tile: from n/a through 1.0.
New
|
CWE-352
Origin Validation Error
|
CVE-2025-23573
|
2025-01-17 05:15 |
2025-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
397
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in Dave Konopka, Martin Scharm UpDownUpDown allows Stored XSS.This issue affects UpDownUpDown: from n/a through 1.1.
New
|
CWE-352
Origin Validation Error
|
CVE-2025-23572
|
2025-01-17 05:15 |
2025-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
398
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in Kelvin Ng Shortcode in Comment allows Stored XSS.This issue affects Shortcode in Comment: from n/a through 1.1.1.
New
|
CWE-352
Origin Validation Error
|
CVE-2025-23569
|
2025-01-17 05:15 |
2025-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
399
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in Intuitive Design GDReseller allows Stored XSS.This issue affects GDReseller: from n/a through 1.6.
New
|
CWE-352
Origin Validation Error
|
CVE-2025-23567
|
2025-01-17 05:15 |
2025-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
400
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in Syed Amir Hussain Custom Post allows Stored XSS.This issue affects Custom Post: from n/a through 1.0.
New
|
CWE-352
Origin Validation Error
|
CVE-2025-23566
|
2025-01-17 05:15 |
2025-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|