Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-30920 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in teastudio.pl WP Posts Carousel allows Stored XSS. This issue affects WP Posts Carousel: from n/a through 1.3.7.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30918 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codemacher Structured Content allows Stored XSS. This issue affects Structured Content: from n/a through 1.6.3.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30914 |
Description: Server-Side Request Forgery (SSRF) vulnerability in XpeedStudio Metform allows Server Side Request Forgery. This issue affects Metform: from n/a through 3.9.2.
CVSS: MEDIUM (4.4) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30912 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Float menu allows Cross Site Request Forgery. This issue affects Float menu: from n/a through 6.1.2.
CVSS: MEDIUM (5.4) EPSS Score: 0.02%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30909 |
Description: Missing Authorization vulnerability in Conversios Conversios.io allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Conversios.io: from n/a through 7.2.3.
CVSS: MEDIUM (4.3) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30907 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SecuPress SecuPress Free allows DOM-Based XSS. This issue affects SecuPress Free: from n/a through 2.2.5.3.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30904 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Chartify allows Stored XSS. This issue affects Chartify: from n/a through 3.1.7.
CVSS: MEDIUM (5.9) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30903 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Mills SyntaxHighlighter Evolved allows DOM-Based XSS. This issue affects SyntaxHighlighter Evolved: from n/a through 3.7.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30900 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zoho Subscriptions Zoho Billing – Embed Payment Form allows Stored XSS. This issue affects Zoho Billing – Embed Payment Form: from n/a through 4.0.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30899 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration allows Stored XSS. This issue affects User Registration: from n/a through 4.0.3.
CVSS: MEDIUM (5.9) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|