CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-22824

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lucia Intelisano Live Flight Radar allows Stored XSS.This issue affects Live Flight Radar: from n/a through 1.0.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22823

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Twerdy Genesis Style Shortcodes allows DOM-Based XSS.This issue affects Genesis Style Shortcodes: from n/a through 1.0.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22822

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bishawjit Das wp custom countdown allows Stored XSS.This issue affects wp custom countdown: from n/a through 2.8.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22821

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vfthemes StorePress allows DOM-Based XSS.This issue affects StorePress: from n/a through 1.0.12.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22820

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daniel Walmsley VR Views allows Stored XSS.This issue affects VR Views: from n/a through 1.5.1.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22819

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 4wpbari Qr Code and Barcode Scanner Reader allows Stored XSS.This issue affects Qr Code and Barcode Scanner Reader: from n/a through 1.0.0.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22818

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in S3Bubble S3Player – WooCommerce & Elementor Integration allows Stored XSS.This issue affects S3Player – WooCommerce & Elementor Integration: from n/a through 4.2.1.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22817

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Venutius BP Profile Shortcodes Extra allows Stored XSS.This issue affects BP Profile Shortcodes Extra: from n/a through 2.6.0.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22815

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins LLC Button Block allows Stored XSS.This issue affects Button Block: from n/a through 1.1.6.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22813

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ChatBot for WordPress - WPBot Conversational Forms for ChatBot allows Stored XSS.This issue affects Conversational Forms for ChatBot: from n/a through 1.4.2.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)