Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-27314

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kush Sharma Kush Micro News allows Stored XSS. This issue affects Kush Micro News: from n/a through 1.6.7.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-27313

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bernd Altmeier Google Maps GPX Viewer allows Reflected XSS. This issue affects Google Maps GPX Viewer: from n/a through 3.6.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-27309

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeannot Muller flickr-slideshow-wrapper allows Stored XSS. This issue affects flickr-slideshow-wrapper: from n/a through 5.4.6.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-27308

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmstactics WP Video Posts allows Reflected XSS. This issue affects WP Video Posts: from n/a through 3.5.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-27295

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpion Live css allows Stored XSS. This issue affects Live css: from n/a through 1.3.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-27293

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webparexapp Shipmozo Courier Tracking allows Reflected XSS. This issue affects Shipmozo Courier Tracking: from n/a through 1.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-27292

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPyog WPYog Documents allows Reflected XSS. This issue affects WPYog Documents: from n/a through 1.3.3.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-27291

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxgallery WordPress Photo Gallery – Image Gallery allows Reflected XSS. This issue affects WordPress Photo Gallery – Image Gallery: from n/a through 2.0.4.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-27289

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Antoine Guillien Restrict Taxonomies allows Reflected XSS. This issue affects Restrict Taxonomies: from n/a through 1.3.3.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)

CVE-2025-27288

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BjornW File Icons allows Reflected XSS. This issue affects File Icons: from n/a through 2.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
April 17th, 2025 (about 2 months ago)