CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-27307 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in oooorgle Quotes llama allows Reflected XSS. This issue affects Quotes llama: from n/a through 3.0.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 24th, 2025 (4 months ago)
|
|
CVE-2025-27306 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pathomation Pathomation allows Stored XSS. This issue affects Pathomation: from n/a through 2.5.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 24th, 2025 (4 months ago)
|
|
CVE-2025-27305 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Achal Jain Table of Contents Block allows Stored XSS. This issue affects Table of Contents Block: from n/a through 1.0.2.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 24th, 2025 (4 months ago)
|
|
CVE-2025-27304 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelogger Contact Form 7 Star Rating with font Awesome allows Stored XSS. This issue affects Contact Form 7 Star Rating with font Awesome: from n/a through 1.3.
CVSS: MEDIUM (5.9) EPSS Score: 0.04%
February 24th, 2025 (4 months ago)
|
|
CVE-2025-27303 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelogger Contact Form 7 Star Rating allows Stored XSS. This issue affects Contact Form 7 Star Rating: from n/a through 1.10.
CVSS: MEDIUM (5.9) EPSS Score: 0.04%
February 24th, 2025 (4 months ago)
|
|
CVE-2025-27294 |
Description: Missing Authorization vulnerability in platcom WP-Asambleas allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP-Asambleas: from n/a through 2.85.0.
CVSS: MEDIUM (4.8) EPSS Score: 0.04%
February 24th, 2025 (4 months ago)
|
|
CVE-2025-27290 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in seyyed-amir Erima Zarinpal Donate allows Cross Site Request Forgery. This issue affects Erima Zarinpal Donate: from n/a through 1.0.
CVSS: MEDIUM (4.3) EPSS Score: 0.02%
February 24th, 2025 (4 months ago)
|
|
CVE-2025-27280 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alobaidi Archive Page allows DOM-Based XSS. This issue affects Archive Page: from n/a through 1.0.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 24th, 2025 (4 months ago)
|
|
CVE-2025-27266 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ignacio Perez Hover Image Button allows DOM-Based XSS. This issue affects Hover Image Button: from n/a through 1.1.2.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 24th, 2025 (4 months ago)
|
|
CVE-2025-27265 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aaron D. Campbell Google Maps for WordPress allows DOM-Based XSS. This issue affects Google Maps for WordPress: from n/a through 1.0.3.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 24th, 2025 (4 months ago)
|