CVE-2025-24609 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PortOne PORTONE 우커머스 결제 allows Reflected XSS. This issue affects PORTONE 우커머스 결제: from n/a through 3.2.4.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (3 months ago)
|
CVE-2025-24608 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Mail Queue allows Reflected XSS. This issue affects GD Mail Queue: from n/a through 4.3.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (3 months ago)
|
CVE-2025-24563 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGlow Cleanup – Directory Listing & Classifieds WordPress Plugin allows Reflected XSS. This issue affects Cleanup – Directory Listing & Classifieds WordPress Plugin: from n/a through 1.0.4.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (3 months ago)
|
CVE-2025-24560 |
WordPress Awesome Event Booking plugin <= 2.7.1 - Reflected Cross Site Scripting (XSS) vulnerability
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Awesome TOGI Awesome Event Booking allows Reflected XSS. This issue affects Awesome Event Booking: from n/a through 2.7.1.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (3 months ago)
|
CVE-2025-24551 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OneTeamSoftware Radio Buttons and Swatches for WooCommerce allows Reflected XSS. This issue affects Radio Buttons and Swatches for WooCommerce: from n/a through 1.1.20.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (3 months ago)
|
CVE-2025-24549 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in Mahbubur Rahman Post Meta allows Reflected XSS. This issue affects Post Meta: from n/a through 1.0.9.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (3 months ago)
|
CVE-2025-24535 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SKT Themes SKT Donation allows Reflected XSS. This issue affects SKT Donation: from n/a through 1.9.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (3 months ago)
|
CVE-2025-24534 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Emili Castells DPortfolio allows Reflected XSS. This issue affects DPortfolio: from n/a through 2.0.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (3 months ago)
|
CVE-2025-23990 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in jablonczay Scroll Styler. This issue affects Scroll Styler: from n/a through 1.1.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (3 months ago)
|
CVE-2025-23989 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi - SabLab Internal Link Builder allows Cross Site Request Forgery. This issue affects Internal Link Builder: from n/a through 1.0.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (3 months ago)
|