CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-23645

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Optimize Worldwide Find Content IDs allows Reflected XSS. This issue affects Find Content IDs: from n/a through 1.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 5th, 2025 (4 months ago)

CVE-2025-22794

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Landoweb Programador World Cup Predictor allows Reflected XSS. This issue affects World Cup Predictor: from n/a through 1.9.6.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 5th, 2025 (4 months ago)

CVE-2025-22700

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Traveler Code. This issue affects Traveler Code: from n/a through 3.1.0.

CVSS: HIGH (8.5)

EPSS Score: 0.04%

Source: CVE
February 5th, 2025 (4 months ago)

CVE-2025-24781

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WPJobBoard allows Reflected XSS. This issue affects WPJobBoard: from n/a through 5.10.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 4th, 2025 (5 months ago)

CVE-2025-24707

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GT3 Photo Gallery Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery allows Reflected XSS. This issue affects Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery: from n/a through 2.7.7.24.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 4th, 2025 (5 months ago)

CVE-2025-24684

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ederson Peka Media Downloader allows Reflected XSS. This issue affects Media Downloader: from n/a through 0.4.7.5.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 4th, 2025 (5 months ago)

CVE-2025-24676

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metatagg Inc Custom WP Store Locator allows Reflected XSS. This issue affects Custom WP Store Locator: from n/a through 1.4.7.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 4th, 2025 (5 months ago)

CVE-2025-24660

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wp.insider Simple Membership Custom Messages allows Reflected XSS. This issue affects Simple Membership Custom Messages: from n/a through 2.4.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 4th, 2025 (5 months ago)

CVE-2025-24656

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Realtyna Realtyna Provisioning allows Reflected XSS. This issue affects Realtyna Provisioning: from n/a through 1.2.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 4th, 2025 (5 months ago)

CVE-2025-24646

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maxim Glazunov XML for Avito allows Reflected XSS. This issue affects XML for Avito: from n/a through 2.5.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
February 4th, 2025 (5 months ago)