Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-24609

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PortOne PORTONE 우커머스 결제 allows Reflected XSS. This issue affects PORTONE 우커머스 결제: from n/a through 3.2.4.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 1st, 2025 (3 months ago)

CVE-2025-24608

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Mail Queue allows Reflected XSS. This issue affects GD Mail Queue: from n/a through 4.3.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 1st, 2025 (3 months ago)

CVE-2025-24563

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGlow Cleanup – Directory Listing & Classifieds WordPress Plugin allows Reflected XSS. This issue affects Cleanup – Directory Listing & Classifieds WordPress Plugin: from n/a through 1.0.4.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 1st, 2025 (3 months ago)

CVE-2025-24560

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Awesome TOGI Awesome Event Booking allows Reflected XSS. This issue affects Awesome Event Booking: from n/a through 2.7.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 1st, 2025 (3 months ago)

CVE-2025-24551

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OneTeamSoftware Radio Buttons and Swatches for WooCommerce allows Reflected XSS. This issue affects Radio Buttons and Swatches for WooCommerce: from n/a through 1.1.20.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 1st, 2025 (3 months ago)

CVE-2025-24549

Description: Cross-Site Request Forgery (CSRF) vulnerability in Mahbubur Rahman Post Meta allows Reflected XSS. This issue affects Post Meta: from n/a through 1.0.9.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 1st, 2025 (3 months ago)

CVE-2025-24535

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SKT Themes SKT Donation allows Reflected XSS. This issue affects SKT Donation: from n/a through 1.9.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 1st, 2025 (3 months ago)

CVE-2025-24534

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Emili Castells DPortfolio allows Reflected XSS. This issue affects DPortfolio: from n/a through 2.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 1st, 2025 (3 months ago)

CVE-2025-23990

Description: Cross-Site Request Forgery (CSRF) vulnerability in jablonczay Scroll Styler. This issue affects Scroll Styler: from n/a through 1.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 1st, 2025 (3 months ago)

CVE-2025-23989

Description: Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi - SabLab Internal Link Builder allows Cross Site Request Forgery. This issue affects Internal Link Builder: from n/a through 1.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 1st, 2025 (3 months ago)