Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-27267

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in srcoley Random Quotes allows Reflected XSS. This issue affects Random Quotes: from n/a through 1.3.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 26th, 2025 (27 days ago)

CVE-2025-27015

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in designingmedia Hostiko allows PHP Local File Inclusion.This issue affects Hostiko: from n/a before 30.1.

CVSS: HIGH (7.5)

EPSS Score: 0.1%

SSVC Exploitation: none

Source: CVE
March 26th, 2025 (27 days ago)

CVE-2025-27014

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designingmedia Hostiko allows Reflected XSS.This issue affects Hostiko: from n/a before 30.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

SSVC Exploitation: none

Source: CVE
March 26th, 2025 (27 days ago)

CVE-2025-26986

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Pearl - Corporate Business allows PHP Local File Inclusion.This issue affects Pearl - Corporate Business: from n/a before 3.4.8.

CVSS: HIGH (8.1)

EPSS Score: 0.13%

SSVC Exploitation: none

Source: CVE
March 26th, 2025 (27 days ago)

CVE-2025-26584

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound TBTestimonials allows Reflected XSS. This issue affects TBTestimonials: from n/a through 1.7.3.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 26th, 2025 (27 days ago)

CVE-2025-26583

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Video Share VOD allows Reflected XSS. This issue affects Video Share VOD: from n/a through 2.7.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 26th, 2025 (27 days ago)

CVE-2025-26581

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Picture Gallery allows Reflected XSS. This issue affects Picture Gallery: from n/a through 1.6.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 26th, 2025 (27 days ago)

CVE-2025-26579

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper MicroPayments allows Reflected XSS. This issue affects MicroPayments: from n/a through 3.1.6.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 26th, 2025 (27 days ago)

CVE-2025-26576

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in takumin WP Simple Slideshow allows Reflected XSS. This issue affects WP Simple Slideshow: from n/a through 1.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 26th, 2025 (27 days ago)

CVE-2025-26575

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Maurer Display Post Meta allows Reflected XSS. This issue affects Display Post Meta: from n/a through 2.4.4.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 26th, 2025 (27 days ago)