CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-26897 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Baden List Related Attachments allows DOM-Based XSS. This issue affects List Related Attachments: from n/a through 2.1.6.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 25th, 2025 (4 months ago)
|
|
CVE-2025-26896 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vpiwigo PiwigoPress allows Stored XSS. This issue affects PiwigoPress: from n/a through 2.33.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 25th, 2025 (4 months ago)
|
|
CVE-2025-26893 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kiran Potphode Easy Charts allows DOM-Based XSS. This issue affects Easy Charts: from n/a through 1.2.3.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 25th, 2025 (4 months ago)
|
|
CVE-2025-26891 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VW THEMES Ibtana allows Stored XSS. This issue affects Ibtana: from n/a through 1.2.4.9.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 25th, 2025 (4 months ago)
|
|
CVE-2025-26887 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eli EZ SQL Reports Shortcode Widget and DB Backup allows Stored XSS. This issue affects EZ SQL Reports Shortcode Widget and DB Backup: from n/a through 5.21.35.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 25th, 2025 (4 months ago)
|
|
CVE-2025-26884 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift allows Stored XSS. This issue affects Greenshift: from n/a through 10.8.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 25th, 2025 (4 months ago)
|
|
CVE-2025-26882 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Popup Builder allows Stored XSS. This issue affects Popup Builder: from n/a through 1.1.33.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 25th, 2025 (4 months ago)
|
|
CVE-2025-26881 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Sticky Content allows Stored XSS. This issue affects Sticky Content: from n/a through 1.0.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 25th, 2025 (4 months ago)
|
|
CVE-2025-26878 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in patternsinthecloud Autoship Cloud for WooCommerce Subscription Products allows DOM-Based XSS. This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.8.0.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
February 25th, 2025 (4 months ago)
|
|
CVE-2025-26877 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rustaurius Front End Users allows Stored XSS. This issue affects Front End Users: from n/a through 3.2.30.
CVSS: MEDIUM (6.5) EPSS Score: 0.03% SSVC Exploitation: none
February 25th, 2025 (4 months ago)
|