CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-31471

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Falcon Solutions Duplicate Page and Post allows Stored XSS. This issue affects Duplicate Page and Post: from n/a through 1.0.

CVSS: MEDIUM (5.9)

EPSS Score: 0.03%

Source: CVE
March 28th, 2025 (3 months ago)

CVE-2025-31470

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FancyThemes Page Takeover allows Stored XSS. This issue affects Page Takeover: from n/a through 1.1.6.

CVSS: MEDIUM (5.9)

EPSS Score: 0.03%

Source: CVE
March 28th, 2025 (3 months ago)

CVE-2025-31469

Description: Missing Authorization vulnerability in webrangers Clear Sucuri Cache allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Clear Sucuri Cache: from n/a through 1.4.

CVSS: MEDIUM (5.3)

EPSS Score: 0.04%

Source: CVE
March 28th, 2025 (3 months ago)

CVE-2025-31466

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Falcon Solutions Duplicate Page and Post allows Blind SQL Injection. This issue affects Duplicate Page and Post: from n/a through 1.0.

CVSS: HIGH (8.5)

EPSS Score: 0.03%

Source: CVE
March 28th, 2025 (3 months ago)

CVE-2025-31465

Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in cornershop Better Section Navigation Widget allows Stored XSS. This issue affects Better Section Navigation Widget: from n/a through 1.6.1.

CVSS: MEDIUM (6.5)

EPSS Score: 0.03%

Source: CVE
March 28th, 2025 (3 months ago)

CVE-2025-31464

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nazmur Rahman Text Selection Color allows Stored XSS. This issue affects Text Selection Color: from n/a through 1.6.

CVSS: MEDIUM (5.9)

EPSS Score: 0.03%

Source: CVE
March 28th, 2025 (3 months ago)

CVE-2025-31463

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Preetinder Singh TGG WP Optimizer allows Stored XSS. This issue affects TGG WP Optimizer: from n/a through 1.22.

CVSS: MEDIUM (5.9)

EPSS Score: 0.03%

Source: CVE
March 28th, 2025 (3 months ago)

CVE-2025-31460

Description: Cross-Site Request Forgery (CSRF) vulnerability in danielmuldernl OmniLeads Scripts and Tags Manager allows Stored XSS. This issue affects OmniLeads Scripts and Tags Manager: from n/a through 1.3.

CVSS: HIGH (7.1)

EPSS Score: 0.02%

Source: CVE
March 28th, 2025 (3 months ago)

CVE-2025-31459

Description: Cross-Site Request Forgery (CSRF) vulnerability in PasqualePuzio Login Alert allows Stored XSS. This issue affects Login Alert: from n/a through 0.2.1.

CVSS: HIGH (7.1)

EPSS Score: 0.02%

Source: CVE
March 28th, 2025 (3 months ago)

CVE-2025-31458

Description: Cross-Site Request Forgery (CSRF) vulnerability in forsgren Video Embedder allows Stored XSS. This issue affects Video Embedder: from n/a through 1.7.1.

CVSS: HIGH (7.1)

EPSS Score: 0.02%

Source: CVE
March 28th, 2025 (3 months ago)