Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-31563 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vimal Kava AI Search Bar allows Stored XSS. This issue affects AI Search Bar: from n/a through 1.3.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 1st, 2025 (20 days ago)
|
|
CVE-2025-31561 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in M. Tuhin Ultimate Push Notifications allows SQL Injection. This issue affects Ultimate Push Notifications: from n/a through 1.1.8.
CVSS: HIGH (8.5) EPSS Score: 0.03%
April 1st, 2025 (20 days ago)
|
|
CVE-2025-31560 |
Description: Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system allows Privilege Escalation. This issue affects Salon booking system: from n/a through 10.11.
CVSS: HIGH (7.2) EPSS Score: 0.05%
April 1st, 2025 (20 days ago)
|
|
CVE-2025-31548 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M. Tuhin Ultimate Push Notifications allows Reflected XSS. This issue affects Ultimate Push Notifications: from n/a through 1.1.8.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 1st, 2025 (20 days ago)
|
|
CVE-2025-31537 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in madfishdigital Bulk NoIndex & NoFollow Toolkit allows Reflected XSS. This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 2.16.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 1st, 2025 (20 days ago)
|
|
CVE-2025-31462 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rzfarrell CGM Event Calendar allows Reflected XSS. This issue affects CGM Event Calendar: from n/a through 0.8.5.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 1st, 2025 (20 days ago)
|
|
CVE-2025-31461 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound NanoSupport allows Reflected XSS. This issue affects NanoSupport: from n/a through 0.6.0.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 1st, 2025 (20 days ago)
|
|
CVE-2025-31455 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Limit Max IPs Per User allows DOM-Based XSS. This issue affects Limit Max IPs Per User: from n/a through 1.5.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 1st, 2025 (20 days ago)
|
|
CVE-2025-31454 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Delete Post Revision allows Reflected XSS. This issue affects Delete Post Revision: from n/a through 1.1.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 1st, 2025 (20 days ago)
|
|
CVE-2025-31446 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jiangmiao WP Cleaner allows Reflected XSS. This issue affects WP Cleaner: from n/a through 1.1.5.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 1st, 2025 (20 days ago)
|