CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-22812

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FlickDevs News Ticker Widget for Elementor allows Stored XSS.This issue affects News Ticker Widget for Elementor: from n/a through 1.3.2.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22811

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Modeltheme MT Addons for Elementor allows Stored XSS.This issue affects MT Addons for Elementor: from n/a through 1.0.6.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22810

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CBB Team Content Blocks Builder allows Stored XSS.This issue affects Content Blocks Builder: from n/a through 2.7.6.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22809

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gravity Master PDF Catalog Woocommerce allows DOM-Based XSS.This issue affects PDF Catalog Woocommerce: from n/a through 2.0.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22808

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Surbma Surbma | Premium WP allows DOM-Based XSS.This issue affects Surbma | Premium WP: from n/a through 9.0.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22807

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robert Peake Responsive Flickr Slideshow allows Stored XSS.This issue affects Responsive Flickr Slideshow: from n/a through 2.6.0.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22806

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Modernaweb Studio Black Widgets For Elementor allows DOM-Based XSS.This issue affects Black Widgets For Elementor: from n/a through 1.3.8.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22805

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemePoints Skill Bar allows Stored XSS.This issue affects Skill Bar: from n/a through 1.2.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22804

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul Bearne Author Avatars List/Block allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through 2.1.23.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)

CVE-2025-22803

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Advanced Product Information for WooCommerce allows Stored XSS.This issue affects Advanced Product Information for WooCommerce: from n/a through 1.1.4.

CVSS: MEDIUM (6.5)

EPSS Score: 0.04%

Source: CVE
January 10th, 2025 (6 months ago)