Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-23580 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matthew Garvin BizLibrary allows Reflected XSS. This issue affects BizLibrary: from n/a through 1.1.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 22nd, 2025 (3 months ago)
|
|
CVE-2025-23551 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in P. Razvan SexBundle allows Reflected XSS. This issue affects SexBundle: from n/a through 1.4.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 22nd, 2025 (3 months ago)
|
|
CVE-2025-23489 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Messenlehner of WebDevStudios WP-Announcements allows Reflected XSS. This issue affects WP-Announcements: from n/a through 1.8.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 22nd, 2025 (3 months ago)
|
|
CVE-2025-23477 |
Description: Missing Authorization vulnerability in Realty Workstation Realty Workstation allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Realty Workstation: from n/a through 1.0.45.
CVSS: HIGH (8.2) EPSS Score: 0.04%
January 22nd, 2025 (3 months ago)
|
|
CVE-2025-23461 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andrea Dotta, Jacopo Campani, di xkoll.com Social2Blog allows Reflected XSS. This issue affects Social2Blog: from n/a through 0.2.990.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 22nd, 2025 (3 months ago)
|
|
CVE-2025-23454 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flashmaniac Nature FlipBook allows Reflected XSS. This issue affects Nature FlipBook: from n/a through 1.7.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 22nd, 2025 (3 months ago)
|
|
CVE-2025-22763 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Brizy Pro allows Reflected XSS. This issue affects Brizy Pro: from n/a through 2.6.1.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 22nd, 2025 (3 months ago)
|
|
CVE-2025-22735 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TaxoPress WordPress Tag Cloud Plugin – Tag Groups allows Reflected XSS. This issue affects WordPress Tag Cloud Plugin – Tag Groups: from n/a through 2.0.4.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 22nd, 2025 (3 months ago)
|
|
CVE-2025-22733 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPHocus My auctions allegro allows Reflected XSS. This issue affects My auctions allegro: from n/a through 3.6.18.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 22nd, 2025 (3 months ago)
|
|
CVE-2025-22719 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E4J s.r.l. VikAppointments Services Booking Calendar allows Stored XSS. This issue affects VikAppointments Services Booking Calendar: from n/a through 1.2.16.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 22nd, 2025 (3 months ago)
|