CVE-2025-24749 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in Overt Software Solutions LTD EZPZ SAML SP Single Sign On (SSO) allows Cross Site Request Forgery. This issue affects EZPZ SAML SP Single Sign On (SSO): from n/a through 1.2.5.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (5 months ago)
|
CVE-2025-24718 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SWIT WP Sessions Time Monitoring Full Automatic allows Reflected XSS. This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through 1.1.1.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (5 months ago)
|
CVE-2025-24710 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcel Pol Gwolle Guestbook allows Reflected XSS. This issue affects Gwolle Guestbook: from n/a through 4.7.1.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (5 months ago)
|
CVE-2025-24686 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss User Registration Forms RegistrationMagic allows Reflected XSS. This issue affects RegistrationMagic: from n/a through 6.0.3.3.
CVSS: HIGH (7.1) EPSS Score: 0.05%
February 1st, 2025 (5 months ago)
|
CVE-2025-24635 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paytm Paytm Payment Donation allows Reflected XSS. This issue affects Paytm Payment Donation: from n/a through 2.3.1.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (5 months ago)
|
CVE-2025-24632 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce allows Reflected XSS. This issue affects Advanced Dynamic Pricing for WooCommerce: from n/a through 4.9.0.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (5 months ago)
|
CVE-2025-24609 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PortOne PORTONE 우커머스 결제 allows Reflected XSS. This issue affects PORTONE 우커머스 결제: from n/a through 3.2.4.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (5 months ago)
|
CVE-2025-24608 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Mail Queue allows Reflected XSS. This issue affects GD Mail Queue: from n/a through 4.3.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (5 months ago)
|
CVE-2025-24597 |
Description: Insertion of Sensitive Information Into Sent Data vulnerability in UkrSolution Barcode Generator for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects Barcode Generator for WooCommerce: from n/a through 2.0.2.
CVSS: MEDIUM (6.5) EPSS Score: 0.04%
February 1st, 2025 (5 months ago)
|
CVE-2025-24563 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGlow Cleanup – Directory Listing & Classifieds WordPress Plugin allows Reflected XSS. This issue affects Cleanup – Directory Listing & Classifieds WordPress Plugin: from n/a through 1.0.4.
CVSS: HIGH (7.1) EPSS Score: 0.04%
February 1st, 2025 (5 months ago)
|