Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-28924 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound ZenphotoPress allows Reflected XSS. This issue affects ZenphotoPress: from n/a through 1.8.
CVSS: HIGH (7.1) EPSS Score: 0.04% SSVC Exploitation: none
March 26th, 2025 (27 days ago)
|
|
CVE-2025-28921 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound SpatialMatch IDX allows Reflected XSS. This issue affects SpatialMatch IDX: from n/a through 3.0.9.
CVSS: HIGH (7.1) EPSS Score: 0.04%
March 26th, 2025 (27 days ago)
|
|
CVE-2025-28917 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Custom Smilies allows Stored XSS. This issue affects Custom Smilies: from n/a through 2.9.2.
CVSS: HIGH (7.1) EPSS Score: 0.04%
March 26th, 2025 (27 days ago)
|
|
CVE-2025-28911 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gravity2pdf Gravity 2 PDF allows Reflected XSS. This issue affects Gravity 2 PDF: from n/a through 3.1.3.
CVSS: HIGH (7.1) EPSS Score: 0.03% SSVC Exploitation: none
March 26th, 2025 (27 days ago)
|
|
CVE-2025-28903 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Driving Directions allows Reflected XSS. This issue affects Driving Directions: from n/a through 1.4.4.
CVSS: HIGH (7.1) EPSS Score: 0.03% SSVC Exploitation: none
March 26th, 2025 (27 days ago)
|
|
CVE-2025-28899 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Event Ticketing allows Reflected XSS. This issue affects WP Event Ticketing: from n/a through 1.3.4.
CVSS: HIGH (7.1) EPSS Score: 0.03% SSVC Exploitation: none
March 26th, 2025 (27 days ago)
|
|
CVE-2025-28890 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Lightview Plus allows Reflected XSS. This issue affects Lightview Plus: from n/a through 3.1.3.
CVSS: HIGH (7.1) EPSS Score: 0.04% SSVC Exploitation: none
March 26th, 2025 (27 days ago)
|
|
CVE-2025-28889 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Custom Product Stickers for Woocommerce allows Reflected XSS. This issue affects Custom Product Stickers for Woocommerce: from n/a through 1.9.0.
CVSS: HIGH (7.1) EPSS Score: 0.04% SSVC Exploitation: none
March 26th, 2025 (27 days ago)
|
|
CVE-2025-28882 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Omnify, Inc. Omnify allows Reflected XSS. This issue affects Omnify: from n/a through 2.0.3.
CVSS: HIGH (7.1) EPSS Score: 0.04%
March 26th, 2025 (27 days ago)
|
|
CVE-2025-28880 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Blue Captcha allows Reflected XSS. This issue affects Blue Captcha: from n/a through 1.7.4.
CVSS: HIGH (7.1) EPSS Score: 0.04%
March 26th, 2025 (27 days ago)
|