CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-24616

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UIUX Lab Uix Page Builder allows Reflected XSS. This issue affects Uix Page Builder: from n/a through 1.7.3.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 15th, 2025 (4 months ago)

CVE-2025-24615

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fatcatapps Analytics Cat allows Reflected XSS. This issue affects Analytics Cat: from n/a through 1.1.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 15th, 2025 (4 months ago)

CVE-2025-24614

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in agileLogix Post Timeline allows Reflected XSS. This issue affects Post Timeline: from n/a through 2.3.9.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 15th, 2025 (4 months ago)

CVE-2025-24592

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SysBasics Customize My Account for WooCommerce allows Reflected XSS. This issue affects Customize My Account for WooCommerce: from n/a through 2.8.22.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 15th, 2025 (4 months ago)

CVE-2025-24566

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomáš Groulík Intro Tour Tutorial DeepPresentation allows Reflected XSS. This issue affects Intro Tour Tutorial DeepPresentation: from n/a through 6.5.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 15th, 2025 (4 months ago)

CVE-2025-24565

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder Team Tobias WP2LEADS allows Reflected XSS. This issue affects WP2LEADS: from n/a through 3.3.3.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 15th, 2025 (4 months ago)

CVE-2025-24564

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aviplugins.com Contact Form With Shortcode allows Reflected XSS. This issue affects Contact Form With Shortcode: from n/a through 4.2.5.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 15th, 2025 (4 months ago)

CVE-2025-24558

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks allows Reflected XSS. This issue affects CRM Perks: from n/a through 1.1.5.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 15th, 2025 (4 months ago)

CVE-2025-24554

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in awcode AWcode Toolkit allows Reflected XSS. This issue affects AWcode Toolkit: from n/a through 1.0.14.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 15th, 2025 (4 months ago)

CVE-2025-23905

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Johannes van Poelgeest Admin Options Pages allows Reflected XSS. This issue affects Admin Options Pages: from n/a through 0.9.7.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 15th, 2025 (4 months ago)