Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-32622

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTP-less OTP-less one tap Sign in allows Reflected XSS. This issue affects OTP-less one tap Sign in: from n/a through 2.0.58.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-32620

Description: Missing Authorization vulnerability in fromdoppler Doppler Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Doppler Forms: from n/a through 2.4.5.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-32615

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Clinked Clinked Client Portal allows Reflected XSS. This issue affects Clinked Client Portal: from n/a through 1.10.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-32613

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bowo Debug Log Manager allows Stored XSS. This issue affects Debug Log Manager: from n/a through 2.3.4.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-32611

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in We Are De WooCommerce TBC Credit Card Payment Gateway (Free) allows Reflected XSS. This issue affects WooCommerce TBC Credit Card Payment Gateway (Free): from n/a through 2.0.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-32609

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Picture-Planet GmbH Verowa Connect allows Reflected XSS. This issue affects Verowa Connect: from n/a through 3.0.4.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-32608

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Movylo Movylo Marketing Automation allows Reflected XSS. This issue affects Movylo Marketing Automation: from n/a through 2.0.7.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-32606

Description: Cross-Site Request Forgery (CSRF) vulnerability in Deepak Khokhar Listings for Buildium allows Stored XSS. This issue affects Listings for Buildium: from n/a through 0.1.4.

CVSS: HIGH (7.1)

EPSS Score: 0.02%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-32605

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in expresstechsoftware MemberPress Discord Addon allows Reflected XSS. This issue affects MemberPress Discord Addon: from n/a through 1.1.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-32604

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sajjad Aslani AWSA Shipping allows Reflected XSS. This issue affects AWSA Shipping: from n/a through 1.3.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)