Instruction: Please provide detailed information about CVE-2025-23426

CVE:CVE-2025-23426
Description:Cross-Site Request Forgery (CSRF) vulnerability in Wizcrew Technologies go Social allows Stored XSS.This issue affects go Social: from n/a through 1.0.
published:2025-01-16T20:15:33.877


Instruction: Please provide detailed information about CVE-2025-23429

CVE:CVE-2025-23429
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in altimawebsystems.com Altima Lookbook Free for WooCommerce allows Reflected XSS.This issue affects Altima Lookbook Free for WooCommerce: from n/a through 1.1.0.
published:2025-01-16T20:15:34.057


Instruction: Please provide detailed information about CVE-2025-23430

CVE:CVE-2025-23430
Description:Cross-Site Request Forgery (CSRF) vulnerability in Oren Yomtov Mass Custom Fields Manager allows Reflected XSS.This issue affects Mass Custom Fields Manager: from n/a through 1.5.
published:2025-01-16T20:15:34.287


Instruction: Please provide detailed information about CVE-2025-23432

CVE:CVE-2025-23432
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AlTi5 AlT Report allows Reflected XSS.This issue affects AlT Report: from n/a through 1.12.0.
published:2025-01-16T20:15:34.467


Instruction: Please provide detailed information about CVE-2025-23434

CVE:CVE-2025-23434
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Albertolabs.com Easy EU Cookie law allows Stored XSS.This issue affects Easy EU Cookie law: from n/a through 1.3.3.1.
published:2025-01-16T20:15:34.607


Instruction: Please provide detailed information about CVE-2025-23435

CVE:CVE-2025-23435
Description:Cross-Site Request Forgery (CSRF) vulnerability in David Marcucci Password Protect Plugin for WordPress allows Stored XSS.This issue affects Password Protect Plugin for WordPress: from n/a through 0.8.1.0.
published:2025-01-16T20:15:34.770


Instruction: Please provide detailed information about CVE-2025-23436

CVE:CVE-2025-23436
Description:Cross-Site Request Forgery (CSRF) vulnerability in Capa Wp-Scribd-List allows Stored XSS.This issue affects Wp-Scribd-List: from n/a through 1.2.
published:2025-01-16T20:15:34.920


Instruction: Please provide detailed information about CVE-2025-23438

CVE:CVE-2025-23438
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MarvinLabs WP PT-Viewer allows Reflected XSS.This issue affects WP PT-Viewer: from n/a through 2.0.2.
published:2025-01-16T20:15:35.067


Instruction: Please provide detailed information about CVE-2025-23442

CVE:CVE-2025-23442
Description:Cross-Site Request Forgery (CSRF) vulnerability in matias s Shockingly Big IE6 Warning allows Stored XSS.This issue affects Shockingly Big IE6 Warning: from n/a through 1.6.3.
published:2025-01-16T20:15:35.210


Instruction: Please provide detailed information about CVE-2025-23444

CVE:CVE-2025-23444
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nasir Scroll Top Advanced allows Stored XSS.This issue affects Scroll Top Advanced: from n/a through 2.5.
published:2025-01-16T20:15:35.360


Instruction: Please provide detailed information about CVE-2025-23445

CVE:CVE-2025-23445
Description:Cross-Site Request Forgery (CSRF) vulnerability in Scott Swezey Easy Tynt allows Cross Site Request Forgery.This issue affects Easy Tynt: from n/a through 0.2.5.1.
published:2025-01-16T20:15:35.513


Instruction: Please provide detailed information about CVE-2025-23452

CVE:CVE-2025-23452
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EditionGuard Dev Team EditionGuard for WooCommerce – eBook Sales with DRM allows Reflected XSS.This issue affects EditionGuard for WooCommerce – eBook Sales with DRM: from n/a through 3.4.2.
published:2025-01-16T20:15:35.730


Instruction: Please provide detailed information about CVE-2025-23453

CVE:CVE-2025-23453
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Myriad Solutionz Stars SMTP Mailer allows Reflected XSS.This issue affects Stars SMTP Mailer: from n/a through 1.7.
published:2025-01-16T20:15:35.883


Instruction: Please provide detailed information about CVE-2025-23455

CVE:CVE-2025-23455
Description:Cross-Site Request Forgery (CSRF) vulnerability in mastersoftwaresolutions WP VTiger Synchronization allows Stored XSS.This issue affects WP VTiger Synchronization: from n/a through 1.1.1.
published:2025-01-16T20:15:36.033


Instruction: Please provide detailed information about CVE-2025-23456

CVE:CVE-2025-23456
Description:Cross-Site Request Forgery (CSRF) vulnerability in Somethinkodd.com Development Team EmailShroud allows Reflected XSS.This issue affects EmailShroud: from n/a through 2.2.1.
published:2025-01-16T20:15:36.247


Instruction: Please provide detailed information about CVE-2025-23463

CVE:CVE-2025-23463
Description:Cross-Site Request Forgery (CSRF) vulnerability in Mukesh Dak MD Custom content after or before of post allows Stored XSS.This issue affects MD Custom content after or before of post: from n/a through 1.0.
published:2025-01-16T20:15:36.397


Instruction: Please provide detailed information about CVE-2025-23467

CVE:CVE-2025-23467
Description:Cross-Site Request Forgery (CSRF) vulnerability in Vimal Ghorecha RSS News Scroller allows Stored XSS.This issue affects RSS News Scroller: from n/a through 2.0.0.
published:2025-01-16T20:15:36.547


Instruction: Please provide detailed information about CVE-2025-23470

CVE:CVE-2025-23470
Description:Cross-Site Request Forgery (CSRF) vulnerability in X Villamuera Visit Site Link enhanced allows Stored XSS.This issue affects Visit Site Link enhanced: from n/a through 1.0.
published:2025-01-16T20:15:36.700


Instruction: Please provide detailed information about CVE-2025-23471

CVE:CVE-2025-23471
Description:Cross-Site Request Forgery (CSRF) vulnerability in Andy Chapman ECT Add to Cart Button allows Stored XSS.This issue affects ECT Add to Cart Button: from n/a through 1.4.
published:2025-01-16T20:15:36.840


Instruction: Please provide detailed information about CVE-2025-23476

CVE:CVE-2025-23476
Description:Cross-Site Request Forgery (CSRF) vulnerability in isnowfy my-related-posts allows Stored XSS.This issue affects my-related-posts: from n/a through 1.1.
published:2025-01-16T20:15:36.990


Instruction: Please provide detailed information about CVE-2025-23483

CVE:CVE-2025-23483
Description:Cross-Site Request Forgery (CSRF) vulnerability in Niklas Olsson Universal Analytics Injector allows Stored XSS.This issue affects Universal Analytics Injector: from n/a through 1.0.3.
published:2025-01-16T20:15:37.133


Instruction: Please provide detailed information about CVE-2025-23497

CVE:CVE-2025-23497
Description:Cross-Site Request Forgery (CSRF) vulnerability in Albdesign Simple Project Manager allows Stored XSS.This issue affects Simple Project Manager: from n/a through 1.2.2.
published:2025-01-16T20:15:37.293


Instruction: Please provide detailed information about CVE-2025-23499

CVE:CVE-2025-23499
Description:Cross-Site Request Forgery (CSRF) vulnerability in Pascal Casier Board Election allows Stored XSS.This issue affects Board Election: from n/a through 1.0.1.
published:2025-01-16T20:15:37.440


Instruction: Please provide detailed information about CVE-2025-23501

CVE:CVE-2025-23501
Description:Cross-Site Request Forgery (CSRF) vulnerability in SpruceJoy Cookie Consent & Autoblock for GDPR/CCPA allows Stored XSS.This issue affects Cookie Consent & Autoblock for GDPR/CCPA: from n/a through 1.0.1.
published:2025-01-16T20:15:37.593


Instruction: Please provide detailed information about CVE-2025-23508

CVE:CVE-2025-23508
Description:Cross-Site Request Forgery (CSRF) vulnerability in EdesaC Extra Options – Favicons allows Stored XSS.This issue affects Extra Options – Favicons: from n/a through 1.1.0.
published:2025-01-16T20:15:37.737


Instruction: Please provide detailed information about CVE-2025-23510

CVE:CVE-2025-23510
Description:Cross-Site Request Forgery (CSRF) vulnerability in Zaantar WordPress Logging Service allows Stored XSS.This issue affects WordPress Logging Service: from n/a through 1.5.4.
published:2025-01-16T20:15:37.890


Instruction: Please provide detailed information about CVE-2025-23511

CVE:CVE-2025-23511
Description:Cross-Site Request Forgery (CSRF) vulnerability in Viktoria Rei Bauer WP-BlackCheck allows Stored XSS.This issue affects WP-BlackCheck: from n/a through 2.7.2.
published:2025-01-16T20:15:38.040


Instruction: Please provide detailed information about CVE-2025-23513

CVE:CVE-2025-23513
Description:Cross-Site Request Forgery (CSRF) vulnerability in Joshua Wieczorek Bible Embed allows Stored XSS.This issue affects Bible Embed: from n/a through 0.0.4.
published:2025-01-16T20:15:38.193


Instruction: Please provide detailed information about CVE-2025-23514

CVE:CVE-2025-23514
Description:Missing Authorization vulnerability in Sanjaysolutions Loginplus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Loginplus: from n/a through 1.2.
published:2025-01-16T20:15:38.337


Instruction: Please provide detailed information about CVE-2025-23528

CVE:CVE-2025-23528
Description:Incorrect Privilege Assignment vulnerability in Wouter Dijkstra DD Roles allows Privilege Escalation.This issue affects DD Roles: from n/a through 4.1.
published:2025-01-16T20:15:38.480


Instruction: Please provide detailed information about CVE-2025-23530

CVE:CVE-2025-23530
Description:Cross-Site Request Forgery (CSRF) vulnerability in Yonatan Reinberg of Social Ink Custom Post Type Lockdown allows Privilege Escalation.This issue affects Custom Post Type Lockdown: from n/a through 1.11.
published:2025-01-16T20:15:38.630


Instruction: Please provide detailed information about CVE-2025-23532

CVE:CVE-2025-23532
Description:Cross-Site Request Forgery (CSRF) vulnerability in Regios MyAnime Widget allows Privilege Escalation.This issue affects MyAnime Widget: from n/a through 1.0.
published:2025-01-16T20:15:38.783


Instruction: Please provide detailed information about CVE-2025-23533

CVE:CVE-2025-23533
Description:Cross-Site Request Forgery (CSRF) vulnerability in Adrian Moreno WP Lyrics allows Stored XSS.This issue affects WP Lyrics: from n/a through 0.4.1.
published:2025-01-16T20:15:38.930


Instruction: Please provide detailed information about CVE-2025-23537

CVE:CVE-2025-23537
Description:Cross-Site Request Forgery (CSRF) vulnerability in Oren hahiashvili add custom google tag manager allows Stored XSS.This issue affects add custom google tag manager: from n/a through 1.0.3.
published:2025-01-16T20:15:39.070


Instruction: Please provide detailed information about CVE-2025-23547

CVE:CVE-2025-23547
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Peter Shaw LH Login Page allows Reflected XSS.This issue affects LH Login Page: from n/a through 2.14.
published:2025-01-16T20:15:39.220


Instruction: Please provide detailed information about CVE-2025-23557

CVE:CVE-2025-23557
Description:Cross-Site Request Forgery (CSRF) vulnerability in Kathleen Malone Find Your Reps allows Stored XSS.This issue affects Find Your Reps: from n/a through 1.2.
published:2025-01-16T20:15:39.363


Instruction: Please provide detailed information about CVE-2025-23558

CVE:CVE-2025-23558
Description:Cross-Site Request Forgery (CSRF) vulnerability in digfish Geotagged Media allows Stored XSS.This issue affects Geotagged Media: from n/a through 0.3.0.
published:2025-01-16T20:15:39.503


Instruction: Please provide detailed information about CVE-2025-23559

CVE:CVE-2025-23559
Description:Cross-Site Request Forgery (CSRF) vulnerability in Stepan Stepasyuk MemeOne allows Stored XSS.This issue affects MemeOne: from n/a through 2.0.5.
published:2025-01-16T20:15:39.650


Instruction: Please provide detailed information about CVE-2025-23560

CVE:CVE-2025-23560
Description:Cross-Site Request Forgery (CSRF) vulnerability in Elke Hinze, Plumeria Web Design Web Testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through 1.2.
published:2025-01-16T20:15:39.797


Instruction: Please provide detailed information about CVE-2025-23566

CVE:CVE-2025-23566
Description:Cross-Site Request Forgery (CSRF) vulnerability in Syed Amir Hussain Custom Post allows Stored XSS.This issue affects Custom Post: from n/a through 1.0.
published:2025-01-16T20:15:39.947


Instruction: Please provide detailed information about CVE-2025-23567

CVE:CVE-2025-23567
Description:Cross-Site Request Forgery (CSRF) vulnerability in Intuitive Design GDReseller allows Stored XSS.This issue affects GDReseller: from n/a through 1.6.
published:2025-01-16T20:15:40.090


Instruction: Please provide detailed information about CVE-2025-23569

CVE:CVE-2025-23569
Description:Cross-Site Request Forgery (CSRF) vulnerability in Kelvin Ng Shortcode in Comment allows Stored XSS.This issue affects Shortcode in Comment: from n/a through 1.1.1.
published:2025-01-16T20:15:40.230


Instruction: Please provide detailed information about CVE-2025-23572

CVE:CVE-2025-23572
Description:Cross-Site Request Forgery (CSRF) vulnerability in Dave Konopka, Martin Scharm UpDownUpDown allows Stored XSS.This issue affects UpDownUpDown: from n/a through 1.1.
published:2025-01-16T20:15:40.403


Instruction: Please provide detailed information about CVE-2025-23573

CVE:CVE-2025-23573
Description:Cross-Site Request Forgery (CSRF) vulnerability in Sam Burdge WP Background Tile allows Stored XSS.This issue affects WP Background Tile: from n/a through 1.0.
published:2025-01-16T20:15:40.740


Instruction: Please provide detailed information about CVE-2025-23577

CVE:CVE-2025-23577
Description:Cross-Site Request Forgery (CSRF) vulnerability in Sourov Amin Word Freshener allows Stored XSS.This issue affects Word Freshener: from n/a through 1.3.
published:2025-01-16T20:15:40.877


Instruction: Please provide detailed information about CVE-2025-23617

CVE:CVE-2025-23617
Description:Cross-Site Request Forgery (CSRF) vulnerability in Oliver Schaal Floatbox Plus allows Stored XSS.This issue affects Floatbox Plus: from n/a through 1.4.4.
published:2025-01-16T20:15:41.027


Instruction: Please provide detailed information about CVE-2025-23618

CVE:CVE-2025-23618
Description:Cross-Site Request Forgery (CSRF) vulnerability in Andrea Brandi Twitter Shortcode allows Stored XSS.This issue affects Twitter Shortcode: from n/a through 0.9.
published:2025-01-16T20:15:41.193


Instruction: Please provide detailed information about CVE-2025-23620

CVE:CVE-2025-23620
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexey Trofimov Captchelfie – Captcha by Selfie allows Reflected XSS.This issue affects Captchelfie – Captcha by Selfie: from n/a through 1.0.7.
published:2025-01-16T20:15:41.340


Instruction: Please provide detailed information about CVE-2025-23623

CVE:CVE-2025-23623
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mahesh Bisen Contact Form 7 – CCAvenue Add-on allows Reflected XSS.This issue affects Contact Form 7 – CCAvenue Add-on: from n/a through 1.0.
published:2025-01-16T20:15:41.480


Instruction: Please provide detailed information about CVE-2025-23627

CVE:CVE-2025-23627
Description:Cross-Site Request Forgery (CSRF) vulnerability in Gordon French Comment-Emailer allows Stored XSS.This issue affects Comment-Emailer: from n/a through 1.0.5.
published:2025-01-16T20:15:41.617


Instruction: Please provide detailed information about CVE-2025-23639

CVE:CVE-2025-23639
Description:Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan MDC YouTube Downloader allows Stored XSS.This issue affects MDC YouTube Downloader: from n/a through 3.0.0.
published:2025-01-16T20:15:41.763


Instruction: Please provide detailed information about CVE-2025-23640

CVE:CVE-2025-23640
Description:Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan Rename Author Slug allows Stored XSS.This issue affects Rename Author Slug: from n/a through 1.2.0.
published:2025-01-16T20:15:41.900


Instruction: Please provide detailed information about CVE-2025-23641

CVE:CVE-2025-23641
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thomas Ehrhardt Powie's pLinks PagePeeker allows DOM-Based XSS.This issue affects Powie's pLinks PagePeeker: from n/a through 1.0.2.
published:2025-01-16T20:15:42.037


Instruction: Please provide detailed information about CVE-2025-23642

CVE:CVE-2025-23642
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pflonk Sidebar-Content from Shortcode allows DOM-Based XSS.This issue affects Sidebar-Content from Shortcode: from n/a through 2.0.
published:2025-01-16T20:15:42.190


Instruction: Please provide detailed information about CVE-2025-23644

CVE:CVE-2025-23644
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Kuepper QuoteMedia Tools allows DOM-Based XSS.This issue affects QuoteMedia Tools: from n/a through 1.0.
published:2025-01-16T20:15:42.323


Instruction: Please provide detailed information about CVE-2025-23649

CVE:CVE-2025-23649
Description:Cross-Site Request Forgery (CSRF) vulnerability in Kreg Steppe Auphonic Importer allows Stored XSS.This issue affects Auphonic Importer: from n/a through 1.5.1.
published:2025-01-16T20:15:42.463


Instruction: Please provide detailed information about CVE-2025-23654

CVE:CVE-2025-23654
Description:Cross-Site Request Forgery (CSRF) vulnerability in Vinícius Krolow Twitter Post allows Stored XSS.This issue affects Twitter Post: from n/a through 0.1.
published:2025-01-16T20:15:42.607


Instruction: Please provide detailed information about CVE-2025-23659

CVE:CVE-2025-23659
Description:Cross-Site Request Forgery (CSRF) vulnerability in Hernan Javier Hegykozi MercadoLibre Integration allows Stored XSS.This issue affects MercadoLibre Integration: from n/a through 1.1.
published:2025-01-16T20:15:42.750


Instruction: Please provide detailed information about CVE-2025-23660

CVE:CVE-2025-23660
Description:Cross-Site Request Forgery (CSRF) vulnerability in Walter Cerrudo MFPlugin allows Stored XSS.This issue affects MFPlugin: from n/a through 1.3.
published:2025-01-16T20:15:42.893


Instruction: Please provide detailed information about CVE-2025-23661

CVE:CVE-2025-23661
Description:Cross-Site Request Forgery (CSRF) vulnerability in Ryan Sutana NV Slider allows Stored XSS.This issue affects NV Slider: from n/a through 1.6.
published:2025-01-16T20:15:43.037


Instruction: Please provide detailed information about CVE-2025-23662

CVE:CVE-2025-23662
Description:Cross-Site Request Forgery (CSRF) vulnerability in Ryan Sutana WP Panoramio allows Stored XSS.This issue affects WP Panoramio: from n/a through 1.5.0.
published:2025-01-16T20:15:43.167


Instruction: Please provide detailed information about CVE-2025-23664

CVE:CVE-2025-23664
Description:Cross-Site Request Forgery (CSRF) vulnerability in Real Seguro Viagem Real Seguro Viagem allows Stored XSS.This issue affects Real Seguro Viagem: from n/a through 2.0.5.
published:2025-01-16T20:15:43.320


Instruction: Please provide detailed information about CVE-2025-23665

CVE:CVE-2025-23665
Description:Cross-Site Request Forgery (CSRF) vulnerability in Rapid Sort RSV GMaps allows Stored XSS.This issue affects RSV GMaps: from n/a through 1.5.
published:2025-01-16T20:15:43.460


Instruction: Please provide detailed information about CVE-2025-23673

CVE:CVE-2025-23673
Description:Cross-Site Request Forgery (CSRF) vulnerability in Don Kukral Email on Publish allows Stored XSS.This issue affects Email on Publish: from n/a through 1.5.
published:2025-01-16T20:15:43.620


Instruction: Please provide detailed information about CVE-2025-23675

CVE:CVE-2025-23675
Description:Cross-Site Request Forgery (CSRF) vulnerability in SandyIN Import Users to MailChimp allows Stored XSS.This issue affects Import Users to MailChimp: from n/a through 1.0.
published:2025-01-16T20:15:43.753


Instruction: Please provide detailed information about CVE-2025-23677

CVE:CVE-2025-23677
Description:Cross-Site Request Forgery (CSRF) vulnerability in DSmidgy HTTP to HTTPS link changer by Eyga.net allows Stored XSS.This issue affects HTTP to HTTPS link changer by Eyga.net: from n/a through 0.2.4.
published:2025-01-16T20:15:43.900


Instruction: Please provide detailed information about CVE-2025-23689

CVE:CVE-2025-23689
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Poco Blogger Image Import allows Stored XSS.This issue affects Blogger Image Import: from 2.1 through n/a.
published:2025-01-16T20:15:44.040


Instruction: Please provide detailed information about CVE-2025-23690

CVE:CVE-2025-23690
Description:Cross-Site Request Forgery (CSRF) vulnerability in ArtkanMedia Book a Place allows Stored XSS.This issue affects Book a Place: from n/a through 0.7.1.
published:2025-01-16T20:15:44.197


Instruction: Please provide detailed information about CVE-2025-23691

CVE:CVE-2025-23691
Description:Cross-Site Request Forgery (CSRF) vulnerability in Braulio Aquino García Send to Twitter allows Stored XSS.This issue affects Send to Twitter: from n/a through 1.7.2.
published:2025-01-16T20:15:44.353


Instruction: Please provide detailed information about CVE-2025-23692

CVE:CVE-2025-23692
Description:Cross-Site Request Forgery (CSRF) vulnerability in Artem Anikeev Slider for Writers allows Stored XSS.This issue affects Slider for Writers: from n/a through 1.3.
published:2025-01-16T20:15:44.503


Instruction: Please provide detailed information about CVE-2025-23693

CVE:CVE-2025-23693
Description:Cross-Site Request Forgery (CSRF) vulnerability in Stanisław Skonieczny Secure CAPTCHA allows Stored XSS.This issue affects Secure CAPTCHA: from n/a through 1.2.
published:2025-01-16T20:15:44.637


Instruction: Please provide detailed information about CVE-2025-23694

CVE:CVE-2025-23694
Description:Cross-Site Request Forgery (CSRF) vulnerability in Shabbos Commerce Shabbos and Yom Tov allows Stored XSS.This issue affects Shabbos and Yom Tov: from n/a through 1.9.
published:2025-01-16T20:15:44.780


Instruction: Please provide detailed information about CVE-2025-23698

CVE:CVE-2025-23698
Description:Cross-Site Request Forgery (CSRF) vulnerability in Iván R. Delgado Martínez WP Custom Google Search allows Stored XSS.This issue affects WP Custom Google Search: from n/a through 1.0.
published:2025-01-16T20:15:44.910


Instruction: Please provide detailed information about CVE-2025-23699

CVE:CVE-2025-23699
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TechMix Event Countdown Timer Plugin by TechMix allows Reflected XSS.This issue affects Event Countdown Timer Plugin by TechMix: from n/a through 1.4.
published:2025-01-16T20:15:45.060


Instruction: Please provide detailed information about CVE-2025-23702

CVE:CVE-2025-23702
Description:Cross-Site Request Forgery (CSRF) vulnerability in Schalk Burger Anonymize Links allows Stored XSS.This issue affects Anonymize Links: from n/a through 1.1.
published:2025-01-16T20:15:45.213


Instruction: Please provide detailed information about CVE-2025-23703

CVE:CVE-2025-23703
Description:Cross-Site Request Forgery (CSRF) vulnerability in CS : ABS-Hosting.nl / Walchum.net Free MailClient FMC allows Stored XSS.This issue affects Free MailClient FMC: from n/a through 1.0.
published:2025-01-16T20:15:45.350


Instruction: Please provide detailed information about CVE-2025-23708

CVE:CVE-2025-23708
Description:Cross-Site Request Forgery (CSRF) vulnerability in Dominic Fallows DF Draggable allows Stored XSS.This issue affects DF Draggable: from n/a through 1.13.2.
published:2025-01-16T20:15:45.493


Instruction: Please provide detailed information about CVE-2025-23710

CVE:CVE-2025-23710
Description:Cross-Site Request Forgery (CSRF) vulnerability in Mayur Sojitra Flying Twitter Birds allows Stored XSS.This issue affects Flying Twitter Birds: from n/a through 1.8.
published:2025-01-16T20:15:45.643


Instruction: Please provide detailed information about CVE-2025-23712

CVE:CVE-2025-23712
Description:Cross-Site Request Forgery (CSRF) vulnerability in Kapost Kapost allows Stored XSS.This issue affects Kapost: from n/a through 2.2.9.
published:2025-01-16T20:15:45.800


Instruction: Please provide detailed information about CVE-2025-23713

CVE:CVE-2025-23713
Description:Cross-Site Request Forgery (CSRF) vulnerability in Artem Anikeev Hack me if you can allows Stored XSS.This issue affects Hack me if you can: from n/a through 1.2.
published:2025-01-16T20:15:45.940


Instruction: Please provide detailed information about CVE-2025-23715

CVE:CVE-2025-23715
Description:Cross-Site Request Forgery (CSRF) vulnerability in RaymondDesign Post & Page Notes allows Stored XSS.This issue affects Post & Page Notes: from n/a through 0.1.1.
published:2025-01-16T20:15:46.083


Instruction: Please provide detailed information about CVE-2025-23717

CVE:CVE-2025-23717
Description:Cross-Site Request Forgery (CSRF) vulnerability in ITMOOTI Theme My Ontraport Smartform allows Stored XSS.This issue affects Theme My Ontraport Smartform: from n/a through 1.2.11.
published:2025-01-16T20:15:46.247


Instruction: Please provide detailed information about CVE-2025-23720

CVE:CVE-2025-23720
Description:Cross-Site Request Forgery (CSRF) vulnerability in Mozilla Web Push allows Stored XSS.This issue affects Web Push: from n/a through 1.4.0.
published:2025-01-16T20:15:46.397


Instruction: Please provide detailed information about CVE-2025-23743

CVE:CVE-2025-23743
Description:Cross-Site Request Forgery (CSRF) vulnerability in Martijn Scheybeler Social Analytics allows Stored XSS.This issue affects Social Analytics: from n/a through 0.2.
published:2025-01-16T20:15:46.550


Instruction: Please provide detailed information about CVE-2025-23745

CVE:CVE-2025-23745
Description:Cross-Site Request Forgery (CSRF) vulnerability in Tussendoor internet & marketing Call me Now allows Stored XSS.This issue affects Call me Now: from n/a through 1.0.5.
published:2025-01-16T20:15:46.687


Instruction: Please provide detailed information about CVE-2025-23749

CVE:CVE-2025-23749
Description:Cross-Site Request Forgery (CSRF) vulnerability in Mahdi Khaksar mybb Last Topics allows Stored XSS.This issue affects mybb Last Topics: from n/a through 1.0.
published:2025-01-16T20:15:46.830


Instruction: Please provide detailed information about CVE-2025-23767

CVE:CVE-2025-23767
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Revolutionart Marmoset Viewer allows Stored XSS.This issue affects Marmoset Viewer: from n/a through 1.9.3.
published:2025-01-16T20:15:46.967


Instruction: Please provide detailed information about CVE-2025-23783

CVE:CVE-2025-23783
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in carrotbits Greek Namedays Widget From Eortologio.Net allows Stored XSS.This issue affects Greek Namedays Widget From Eortologio.Net: from n/a through 20191113.
published:2025-01-16T20:15:47.100


Instruction: Please provide detailed information about CVE-2025-23760

CVE:CVE-2025-23760
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Volkov Chatter allows Stored XSS. This issue affects Chatter: from n/a through 1.0.1.
published:2025-01-16T21:15:18.257


Instruction: Please provide detailed information about CVE-2025-23761

CVE:CVE-2025-23761
Description:Missing Authorization vulnerability in Alex Volkov Woo Tuner allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Woo Tuner: from n/a through 0.1.2.
published:2025-01-16T21:15:18.410


Instruction: Please provide detailed information about CVE-2025-23764

CVE:CVE-2025-23764
Description:Missing Authorization vulnerability in Ujjaval Jani Copy Move Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Copy Move Posts: from n/a through 1.6.
published:2025-01-16T21:15:18.550


Instruction: Please provide detailed information about CVE-2025-23765

CVE:CVE-2025-23765
Description:Cross-Site Request Forgery (CSRF) vulnerability in W3speedster W3SPEEDSTER allows Cross Site Request Forgery.This issue affects W3SPEEDSTER: from n/a through 7.33.
published:2025-01-16T21:15:18.700


Instruction: Please provide detailed information about CVE-2025-23772

CVE:CVE-2025-23772
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eugenio Petullà imaGenius allows Stored XSS.This issue affects imaGenius: from n/a through 1.7.
published:2025-01-16T21:15:18.860


Instruction: Please provide detailed information about CVE-2025-23775

CVE:CVE-2025-23775
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WWP GMAPS for WPBakery Page Builder Free allows Stored XSS.This issue affects GMAPS for WPBakery Page Builder Free: from n/a through 1.2.
published:2025-01-16T21:15:19.007


Instruction: Please provide detailed information about CVE-2025-23776

CVE:CVE-2025-23776
Description:Missing Authorization vulnerability in Thorn Technologies LLC Cache Sniper for Nginx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cache Sniper for Nginx: from n/a through 1.0.4.2.
published:2025-01-16T21:15:19.160


Instruction: Please provide detailed information about CVE-2025-23777

CVE:CVE-2025-23777
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Willows Consulting Ltd. GDPR Personal Data Reports allows Stored XSS.This issue affects GDPR Personal Data Reports: from n/a through 1.0.5.
published:2025-01-16T21:15:19.323


Instruction: Please provide detailed information about CVE-2025-23778

CVE:CVE-2025-23778
Description:Missing Authorization vulnerability in Pravin Durugkar User Sync ActiveCampaign allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Sync ActiveCampaign: from n/a through 1.3.2.
published:2025-01-16T21:15:19.483


Instruction: Please provide detailed information about CVE-2025-23779

CVE:CVE-2025-23779
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in web-mv.de ResAds allows SQL Injection.This issue affects ResAds: from n/a through 2.0.5.
published:2025-01-16T21:15:19.640


Instruction: Please provide detailed information about CVE-2025-23780

CVE:CVE-2025-23780
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AlphaBPO Easy Code Snippets allows SQL Injection.This issue affects Easy Code Snippets: from n/a through 1.0.2.
published:2025-01-16T21:15:19.800


Instruction: Please provide detailed information about CVE-2025-23785

CVE:CVE-2025-23785
Description:Missing Authorization vulnerability in August Infotech AI Responsive Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Responsive Gallery Album: from n/a through 1.4.
published:2025-01-16T21:15:19.967


Instruction: Please provide detailed information about CVE-2025-23791

CVE:CVE-2025-23791
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RocaPress Horizontal Line Shortcode allows Stored XSS.This issue affects Horizontal Line Shortcode: from n/a through 1.0.
published:2025-01-16T21:15:20.113


Instruction: Please provide detailed information about CVE-2025-23793

CVE:CVE-2025-23793
Description:Cross-Site Request Forgery (CSRF) vulnerability in Turcu Ciprian Auto FTP allows Stored XSS. This issue affects Auto FTP: from n/a through 1.0.1.
published:2025-01-16T21:15:20.267


Instruction: Please provide detailed information about CVE-2025-23794

CVE:CVE-2025-23794
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rccoder wp_amaps allows Stored XSS.This issue affects wp_amaps: from n/a through 1.7.
published:2025-01-16T21:15:20.397


Instruction: Please provide detailed information about CVE-2025-23795

CVE:CVE-2025-23795
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gold Plugins Easy FAQs allows Stored XSS.This issue affects Easy FAQs: from n/a through 3.2.1.
published:2025-01-16T21:15:20.567


Instruction: Please provide detailed information about CVE-2025-23796

CVE:CVE-2025-23796
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tushar Patel Easy Portfolio allows Stored XSS.This issue affects Easy Portfolio: from n/a through 1.3.
published:2025-01-16T21:15:20.727


Instruction: Please provide detailed information about CVE-2025-23797

CVE:CVE-2025-23797
Description:Cross-Site Request Forgery (CSRF) vulnerability in Mike Selander WP Options Editor allows Privilege Escalation.This issue affects WP Options Editor: from n/a through 1.1.
published:2025-01-16T21:15:20.877


Instruction: Please provide detailed information about CVE-2025-23800

CVE:CVE-2025-23800
Description:Cross-Site Request Forgery (CSRF) vulnerability in David Hamilton OrangeBox allows Cross Site Request Forgery.This issue affects OrangeBox: from n/a through 3.0.0.
published:2025-01-16T21:15:21.040


Instruction: Please provide detailed information about CVE-2025-23801

CVE:CVE-2025-23801
Description:Cross-Site Request Forgery (CSRF) vulnerability in Benjamin Guy Style Admin allows Stored XSS.This issue affects Style Admin: from n/a through 1.4.3.
published:2025-01-16T21:15:21.190


Instruction: Please provide detailed information about CVE-2025-23802

CVE:CVE-2025-23802
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Steven Soehl WP-Revive Adserver allows Stored XSS.This issue affects WP-Revive Adserver: from n/a through 2.2.1.
published:2025-01-16T21:15:21.350


Instruction: Please provide detailed information about CVE-2025-23804

CVE:CVE-2025-23804
Description:Cross-Site Request Forgery (CSRF) vulnerability in Shiv Prakash Tiwari WP Service Payment Form With Authorize.net allows Reflected XSS.This issue affects WP Service Payment Form With Authorize.net: from n/a through 2.6.0.
published:2025-01-16T21:15:21.497


Instruction: Please provide detailed information about CVE-2025-23805

CVE:CVE-2025-23805
Description:Cross-Site Request Forgery (CSRF) vulnerability in SEOReseller Team SEOReseller Partner allows Cross Site Request Forgery.This issue affects SEOReseller Partner: from n/a through 1.3.15.
published:2025-01-16T21:15:21.643


Instruction: Please provide detailed information about CVE-2025-23807

CVE:CVE-2025-23807
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jimmy Hu Spiderpowa Embed PDF allows Stored XSS.This issue affects Spiderpowa Embed PDF: from n/a through 1.0.
published:2025-01-16T21:15:21.800


Instruction: Please provide detailed information about CVE-2025-23808

CVE:CVE-2025-23808
Description:Cross-Site Request Forgery (CSRF) vulnerability in Matt van Andel Custom List Table Example allows Reflected XSS.This issue affects Custom List Table Example: from n/a through 1.4.1.
published:2025-01-16T21:15:21.957


Instruction: Please provide detailed information about CVE-2025-23810

CVE:CVE-2025-23810
Description:Cross-Site Request Forgery (CSRF) vulnerability in Igor Sazonov Len Slider allows Reflected XSS.This issue affects Len Slider: from n/a through 2.0.11.
published:2025-01-16T21:15:22.107


Instruction: Please provide detailed information about CVE-2025-23815

CVE:CVE-2025-23815
Description:Cross-Site Request Forgery (CSRF) vulnerability in linickx root Cookie allows Cross Site Request Forgery. This issue affects root Cookie: from n/a through 1.6.
published:2025-01-16T21:15:22.257


Instruction: Please provide detailed information about CVE-2025-23816

CVE:CVE-2025-23816
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in metaphorcreations Metaphor Widgets allows Stored XSS. This issue affects Metaphor Widgets: from n/a through 2.4.
published:2025-01-16T21:15:22.407


Instruction: Please provide detailed information about CVE-2025-23817

CVE:CVE-2025-23817
Description:Cross-Site Request Forgery (CSRF) vulnerability in Mahadir Ahmad MHR-Custom-Anti-Copy allows Stored XSS.This issue affects MHR-Custom-Anti-Copy: from n/a through 2.0.
published:2025-01-16T21:15:22.560


Instruction: Please provide detailed information about CVE-2025-23818

CVE:CVE-2025-23818
Description:Cross-Site Request Forgery (CSRF) vulnerability in Peggy Kuo More Link Modifier allows Stored XSS.This issue affects More Link Modifier: from n/a through 1.0.3.
published:2025-01-16T21:15:22.693


Instruction: Please provide detailed information about CVE-2025-23820

CVE:CVE-2025-23820
Description:Cross-Site Request Forgery (CSRF) vulnerability in Laxman Thapa Content Security Policy Pro allows Cross Site Request Forgery.This issue affects Content Security Policy Pro: from n/a through 1.3.5.
published:2025-01-16T21:15:22.847


Instruction: Please provide detailed information about CVE-2025-23821

CVE:CVE-2025-23821
Description:Cross-Site Request Forgery (CSRF) vulnerability in Aleapp WP Cookies Alert allows Cross Site Request Forgery.This issue affects WP Cookies Alert: from n/a through 1.1.1.
published:2025-01-16T21:15:22.997


Instruction: Please provide detailed information about CVE-2025-23822

CVE:CVE-2025-23822
Description:Cross-Site Request Forgery (CSRF) vulnerability in Cornea Alexandru Category Custom Fields allows Cross Site Request Forgery.This issue affects Category Custom Fields: from n/a through 1.0.
published:2025-01-16T21:15:23.143


Instruction: Please provide detailed information about CVE-2025-23823

CVE:CVE-2025-23823
Description:Cross-Site Request Forgery (CSRF) vulnerability in jprintf CNZZ&51LA for WordPress allows Cross Site Request Forgery.This issue affects CNZZ&51LA for WordPress: from n/a through 1.0.1.
published:2025-01-16T21:15:23.297


Instruction: Please provide detailed information about CVE-2025-23824

CVE:CVE-2025-23824
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexander Weleczka FontAwesome.io ShortCodes allows Stored XSS.This issue affects FontAwesome.io ShortCodes: from n/a through 1.0.
published:2025-01-16T21:15:23.437


Instruction: Please provide detailed information about CVE-2025-23825

CVE:CVE-2025-23825
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Thorpe Easy Shortcode Buttons allows Stored XSS.This issue affects Easy Shortcode Buttons: from n/a through 1.2.
published:2025-01-16T21:15:23.577


Instruction: Please provide detailed information about CVE-2025-23826

CVE:CVE-2025-23826
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Predrag Supurović Stop Comment Spam allows Stored XSS.This issue affects Stop Comment Spam: from n/a through 0.5.3.
published:2025-01-16T21:15:23.720


Instruction: Please provide detailed information about CVE-2025-23827

CVE:CVE-2025-23827
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Strx Strx Magic Floating Sidebar Maker allows Stored XSS.This issue affects Strx Magic Floating Sidebar Maker: from n/a through 1.4.1.
published:2025-01-16T21:15:23.873


Instruction: Please provide detailed information about CVE-2025-23828

CVE:CVE-2025-23828
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OriginalTips.com WordPress Data Guard allows Stored XSS.This issue affects WordPress Data Guard: from n/a through 8.
published:2025-01-16T21:15:24.047


Instruction: Please provide detailed information about CVE-2025-23830

CVE:CVE-2025-23830
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jobair JB Horizontal Scroller News Ticker allows DOM-Based XSS.This issue affects JB Horizontal Scroller News Ticker: from n/a through 1.0.
published:2025-01-16T21:15:24.213


Instruction: Please provide detailed information about CVE-2025-23831

CVE:CVE-2025-23831
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rene Hermenau QR Code Generator allows DOM-Based XSS.This issue affects QR Code Generator: from n/a through 1.2.6.
published:2025-01-16T21:15:24.360


Instruction: Please provide detailed information about CVE-2025-23832

CVE:CVE-2025-23832
Description:Cross-Site Request Forgery (CSRF) vulnerability in Matt Gibbs Admin Cleanup allows Stored XSS.This issue affects Admin Cleanup: from n/a through 1.0.2.
published:2025-01-16T21:15:24.510


Instruction: Please provide detailed information about CVE-2025-23833

CVE:CVE-2025-23833
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RaminMT Links/Problem Reporter allows DOM-Based XSS.This issue affects Links/Problem Reporter: from n/a through 2.6.0.
published:2025-01-16T21:15:24.653


Instruction: Please provide detailed information about CVE-2025-23841

CVE:CVE-2025-23841
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikos M. Top Flash Embed allows Stored XSS.This issue affects Top Flash Embed: from n/a through 0.3.4.
published:2025-01-16T21:15:24.793


Instruction: Please provide detailed information about CVE-2025-23842

CVE:CVE-2025-23842
Description:Cross-Site Request Forgery (CSRF) vulnerability in Nilesh Shiragave WordPress Gallery Plugin allows Cross Site Request Forgery.This issue affects WordPress Gallery Plugin: from n/a through 1.4.
published:2025-01-16T21:15:24.940


Instruction: Please provide detailed information about CVE-2025-23844

CVE:CVE-2025-23844
Description:Cross-Site Request Forgery (CSRF) vulnerability in wellwisher Custom Widget Classes allows Cross Site Request Forgery.This issue affects Custom Widget Classes: from n/a through 1.1.
published:2025-01-16T21:15:25.080


Instruction: Please provide detailed information about CVE-2025-23848

CVE:CVE-2025-23848
Description:Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Hotspots Analytics allows Stored XSS.This issue affects Hotspots Analytics: from n/a through 4.0.12.
published:2025-01-16T21:15:25.220


Instruction: Please provide detailed information about CVE-2025-23854

CVE:CVE-2025-23854
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YesStreaming.com Shoutcast and Icecast Internet Radio Hosting Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com allows Stored XSS.This issue affects Shoutcast and Icecast HTML5 Web Radio Player by YesStreaming.com: from n/a through 3.3.
published:2025-01-16T21:15:25.357


Instruction: Please provide detailed information about CVE-2025-23856

CVE:CVE-2025-23856
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alessandro Staniscia Simple Vertical Timeline allows DOM-Based XSS.This issue affects Simple Vertical Timeline: from n/a through 0.1.
published:2025-01-16T21:15:25.507


Instruction: Please provide detailed information about CVE-2025-23859

CVE:CVE-2025-23859
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joshua Wieczorek Daily Proverb allows Stored XSS.This issue affects Daily Proverb: from n/a through 2.0.3.
published:2025-01-16T21:15:25.667


Instruction: Please provide detailed information about CVE-2025-23860

CVE:CVE-2025-23860
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eyouth { rob.panes } Charity-thermometer allows Stored XSS.This issue affects Charity-thermometer: from n/a through 1.1.2.
published:2025-01-16T21:15:25.810


Instruction: Please provide detailed information about CVE-2025-23861

CVE:CVE-2025-23861
Description:Cross-Site Request Forgery (CSRF) vulnerability in Katz Web Services, Inc. Debt Calculator allows Cross Site Request Forgery.This issue affects Debt Calculator: from n/a through 1.0.1.
published:2025-01-16T21:15:25.967


Instruction: Please provide detailed information about CVE-2025-23862

CVE:CVE-2025-23862
Description:Missing Authorization vulnerability in SzMake Contact Form 7 Anti Spambot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form 7 Anti Spambot: from n/a through 1.0.1.
published:2025-01-16T21:15:26.127


Instruction: Please provide detailed information about CVE-2025-23863

CVE:CVE-2025-23863
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eiji ‘Sabaoh’ Yamada Rollover Tab allows Stored XSS.This issue affects Rollover Tab: from n/a through 1.3.2.
published:2025-01-16T21:15:26.290


Instruction: Please provide detailed information about CVE-2025-23864

CVE:CVE-2025-23864
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Code Snippets (Luke America) WCS QR Code Generator allows Stored XSS.This issue affects WCS QR Code Generator: from n/a through 1.0.
published:2025-01-16T21:15:26.430


Instruction: Please provide detailed information about CVE-2025-23865

CVE:CVE-2025-23865
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pressfore Winning Portfolio allows Stored XSS.This issue affects Winning Portfolio: from n/a through 1.1.
published:2025-01-16T21:15:26.583


Instruction: Please provide detailed information about CVE-2025-23868

CVE:CVE-2025-23868
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markus Liebelt Chess Tempo Viewer allows Stored XSS.This issue affects Chess Tempo Viewer: from n/a through 0.9.5.
published:2025-01-16T21:15:26.730


Instruction: Please provide detailed information about CVE-2025-23869

CVE:CVE-2025-23869
Description:Cross-Site Request Forgery (CSRF) vulnerability in Shibu Lijack a.k.a CyberJack CJ Custom Content allows Stored XSS.This issue affects CJ Custom Content: from n/a through 2.0.
published:2025-01-16T21:15:26.893


Instruction: Please provide detailed information about CVE-2025-23870

CVE:CVE-2025-23870
Description:Cross-Site Request Forgery (CSRF) vulnerability in Robert Nicholson Copyright Safeguard Footer Notice allows Stored XSS.This issue affects Copyright Safeguard Footer Notice: from n/a through 3.0.
published:2025-01-16T21:15:27.040


Instruction: Please provide detailed information about CVE-2025-23871

CVE:CVE-2025-23871
Description:Cross-Site Request Forgery (CSRF) vulnerability in Bas Matthee LSD Google Maps Embedder allows Cross Site Request Forgery.This issue affects LSD Google Maps Embedder: from n/a through 1.1.
published:2025-01-16T21:15:27.200


Instruction: Please provide detailed information about CVE-2025-23872

CVE:CVE-2025-23872
Description:Cross-Site Request Forgery (CSRF) vulnerability in PayForm PayForm allows Stored XSS.This issue affects PayForm: from n/a through 2.0.
published:2025-01-16T21:15:27.357


Instruction: Please provide detailed information about CVE-2025-23873

CVE:CVE-2025-23873
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anshi Solutions Category D3 Tree allows Stored XSS.This issue affects Category D3 Tree: from n/a through 1.1.
published:2025-01-16T21:15:27.863


Instruction: Please provide detailed information about CVE-2025-23875

CVE:CVE-2025-23875
Description:Cross-Site Request Forgery (CSRF) vulnerability in Tim Ridgway Better Protected Pages allows Stored XSS.This issue affects Better Protected Pages: from n/a through 1.0.
published:2025-01-16T21:15:28.323


Instruction: Please provide detailed information about CVE-2025-23876

CVE:CVE-2025-23876
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jens Remus WP krpano allows Stored XSS.This issue affects WP krpano: from n/a through 1.2.1.
published:2025-01-16T21:15:28.763


Instruction: Please provide detailed information about CVE-2025-23877

CVE:CVE-2025-23877
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nitethemes Nite Shortcodes allows Stored XSS.This issue affects Nite Shortcodes: from n/a through 1.0.
published:2025-01-16T21:15:28.963


Instruction: Please provide detailed information about CVE-2025-23878

CVE:CVE-2025-23878
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Reilly Post-to-Post Links allows Stored XSS.This issue affects Post-to-Post Links: from n/a through 4.2.
published:2025-01-16T21:15:29.140


Instruction: Please provide detailed information about CVE-2025-23880

CVE:CVE-2025-23880
Description:Cross-Site Request Forgery (CSRF) vulnerability in anmari amr personalise allows Cross Site Request Forgery.This issue affects amr personalise: from n/a through 2.10.
published:2025-01-16T21:15:29.310


Instruction: Please provide detailed information about CVE-2025-23884

CVE:CVE-2025-23884
Description:Cross-Site Request Forgery (CSRF) vulnerability in Chris Roberts Annie allows Cross Site Request Forgery.This issue affects Annie: from n/a through 2.1.1.
published:2025-01-16T21:15:29.730


Instruction: Please provide detailed information about CVE-2025-23886

CVE:CVE-2025-23886
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Roberts Annie allows Stored XSS.This issue affects Annie: from n/a through 2.1.1.
published:2025-01-16T21:15:29.927


Instruction: Please provide detailed information about CVE-2025-23887

CVE:CVE-2025-23887
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Allan Wallick Blog Summary allows Stored XSS.This issue affects Blog Summary: from n/a through 0.1.2 β.
published:2025-01-16T21:15:30.087


Instruction: Please provide detailed information about CVE-2025-23890

CVE:CVE-2025-23890
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tom Ewer and Tito Pandu Easy Tweet Embed allows DOM-Based XSS.This issue affects Easy Tweet Embed: from n/a through 1.7.
published:2025-01-16T21:15:30.253


Instruction: Please provide detailed information about CVE-2025-23891

CVE:CVE-2025-23891
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vincent Loy Yet Another Countdown allows DOM-Based XSS.This issue affects Yet Another Countdown: from n/a through 1.0.1.
published:2025-01-16T21:15:30.417


Instruction: Please provide detailed information about CVE-2025-23892

CVE:CVE-2025-23892
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Furr and Simon Ward Progress Tracker allows DOM-Based XSS.This issue affects Progress Tracker: from n/a through 0.9.3.
published:2025-01-16T21:15:30.580


Instruction: Please provide detailed information about CVE-2025-23893

CVE:CVE-2025-23893
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Manuel Costales GMap Shortcode allows DOM-Based XSS.This issue affects GMap Shortcode: from n/a through 2.0.
published:2025-01-16T21:15:30.797


Instruction: Please provide detailed information about CVE-2025-23895

CVE:CVE-2025-23895
Description:Cross-Site Request Forgery (CSRF) vulnerability in Dan Cameron Add RSS allows Stored XSS.This issue affects Add RSS: from n/a through 1.5.
published:2025-01-16T21:15:30.967


Instruction: Please provide detailed information about CVE-2025-23896

CVE:CVE-2025-23896
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oncle Tom Mindmeister Shortcode allows DOM-Based XSS.This issue affects Mindmeister Shortcode: from n/a through 1.0.
published:2025-01-16T21:15:31.137


Instruction: Please provide detailed information about CVE-2025-23897

CVE:CVE-2025-23897
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ivo Brett – ApplyMetrics Apply with LinkedIn buttons allows DOM-Based XSS.This issue affects Apply with LinkedIn buttons: from n/a through 2.3.
published:2025-01-16T21:15:31.310


Instruction: Please provide detailed information about CVE-2025-23898

CVE:CVE-2025-23898
Description:Cross-Site Request Forgery (CSRF) vulnerability in Ivo Brett – ApplyMetrics Apply with LinkedIn buttons allows Stored XSS.This issue affects Apply with LinkedIn buttons: from n/a through 2.3.
published:2025-01-16T21:15:31.497


Instruction: Please provide detailed information about CVE-2025-23899

CVE:CVE-2025-23899
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BnB Select Ltd Bookalet allows Stored XSS.This issue affects Bookalet: from n/a through 1.0.3.
published:2025-01-16T21:15:31.680


Instruction: Please provide detailed information about CVE-2025-23900

CVE:CVE-2025-23900
Description:Cross-Site Request Forgery (CSRF) vulnerability in Genkisan Genki Announcement allows Cross Site Request Forgery.This issue affects Genki Announcement: from n/a through 1.4.1.
published:2025-01-16T21:15:31.857


Instruction: Please provide detailed information about CVE-2025-23901

CVE:CVE-2025-23901
Description:Cross-Site Request Forgery (CSRF) vulnerability in Oliver Schaal GravatarLocalCache allows Cross Site Request Forgery.This issue affects GravatarLocalCache: from n/a through 1.1.2.
published:2025-01-16T21:15:32.027


Instruction: Please provide detailed information about CVE-2025-23902

CVE:CVE-2025-23902
Description:Cross-Site Request Forgery (CSRF) vulnerability in Taras Dashkevych Error Notification allows Cross Site Request Forgery.This issue affects Error Notification: from n/a through 0.2.7.
published:2025-01-16T21:15:32.173


Instruction: Please provide detailed information about CVE-2025-23907

CVE:CVE-2025-23907
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in closed SOCIAL.NINJA allows Stored XSS. This issue affects SOCIAL.NINJA: from n/a through 0.2.
published:2025-01-16T21:15:32.333


Instruction: Please provide detailed information about CVE-2025-23908

CVE:CVE-2025-23908
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rami Yushuvaev Pastebin allows Stored XSS.This issue affects Pastebin: from n/a through 1.5.
published:2025-01-16T21:15:32.480


Instruction: Please provide detailed information about CVE-2025-23909

CVE:CVE-2025-23909
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Common Ninja Compare Ninja allows Stored XSS.This issue affects Compare Ninja: from n/a through 2.1.0.
published:2025-01-16T21:15:32.637


Instruction: Please provide detailed information about CVE-2025-23911

CVE:CVE-2025-23911
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solidres Team Solidres – Hotel booking plugin allows SQL Injection.This issue affects Solidres – Hotel booking plugin: from n/a through 0.9.4.
published:2025-01-16T21:15:32.780


Instruction: Please provide detailed information about CVE-2025-23912

CVE:CVE-2025-23912
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Typomedia Foundation WordPress Custom Sidebar allows Blind SQL Injection.This issue affects WordPress Custom Sidebar: from n/a through 2.3.
published:2025-01-16T21:15:32.930


Instruction: Please provide detailed information about CVE-2025-23913

CVE:CVE-2025-23913
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pankajpragma, rahulpragma WordPress Google Map Professional allows SQL Injection.This issue affects WordPress Google Map Professional: from n/a through 1.0.
published:2025-01-16T21:15:33.100


Instruction: Please provide detailed information about CVE-2025-23915

CVE:CVE-2025-23915
Description:Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Roninwp FAT Event Lite allows PHP Local File Inclusion.This issue affects FAT Event Lite: from n/a through 1.1.
published:2025-01-16T21:15:33.253


Instruction: Please provide detailed information about CVE-2025-23916

CVE:CVE-2025-23916
Description:Missing Authorization vulnerability in Nuanced Media WP Meetup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Meetup: from n/a through 2.3.0.
published:2025-01-16T21:15:33.433


Instruction: Please provide detailed information about CVE-2025-23917

CVE:CVE-2025-23917
Description:Missing Authorization vulnerability in Chandrika Guntur, Morgan Kay Chamber Dashboard Business Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chamber Dashboard Business Directory: from n/a through 3.3.8.
published:2025-01-16T21:15:33.580


Instruction: Please provide detailed information about CVE-2025-23919

CVE:CVE-2025-23919
Description:Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Ella van Durpe Slides & Presentations allows Code Injection.This issue affects Slides & Presentations: from n/a through 0.0.39.
published:2025-01-16T21:15:33.743


Instruction: Please provide detailed information about CVE-2025-23922

CVE:CVE-2025-23922
Description:Cross-Site Request Forgery (CSRF) vulnerability in Harsh iSpring Embedder allows Upload a Web Shell to a Web Server.This issue affects iSpring Embedder: from n/a through 1.0.
published:2025-01-16T21:15:33.890


Instruction: Please provide detailed information about CVE-2025-23924

CVE:CVE-2025-23924
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jérémy Heleine WP Photo Sphere allows Stored XSS.This issue affects WP Photo Sphere: from n/a through 3.8.
published:2025-01-16T21:15:34.040


Instruction: Please provide detailed information about CVE-2025-23925

CVE:CVE-2025-23925
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jimmy Peña Feedburner Optin Form allows Stored XSS.This issue affects Feedburner Optin Form: from n/a through 0.2.8.
published:2025-01-16T21:15:34.187


Instruction: Please provide detailed information about CVE-2025-23926

CVE:CVE-2025-23926
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TC Ajax WP Query Search Filter allows Stored XSS.This issue affects Ajax WP Query Search Filter: from n/a through 1.0.7.
published:2025-01-16T21:15:34.343


Instruction: Please provide detailed information about CVE-2025-23927

CVE:CVE-2025-23927
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Massimo Serpilli Incredible Font Awesome allows Stored XSS.This issue affects Incredible Font Awesome: from n/a through 1.0.
published:2025-01-16T21:15:34.507


Instruction: Please provide detailed information about CVE-2025-23928

CVE:CVE-2025-23928
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Arsovski Google Org Chart allows Stored XSS.This issue affects Google Org Chart: from n/a through 1.0.1.
published:2025-01-16T21:15:34.663


Instruction: Please provide detailed information about CVE-2025-23929

CVE:CVE-2025-23929
Description:Missing Authorization vulnerability in wishfulthemes Email Capture & Lead Generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Email Capture & Lead Generation: from n/a through 1.0.2.
published:2025-01-16T21:15:34.817


Instruction: Please provide detailed information about CVE-2025-23930

CVE:CVE-2025-23930
Description:Missing Authorization vulnerability in iTechArt-Group PayPal Marketing Solutions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PayPal Marketing Solutions: from n/a through 1.2.
published:2025-01-16T21:15:34.987


Instruction: Please provide detailed information about CVE-2025-23933

CVE:CVE-2025-23933
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpFreeware WpF Ultimate Carousel allows Stored XSS.This issue affects WpF Ultimate Carousel: from n/a through 1.0.11.
published:2025-01-16T21:15:35.210


Instruction: Please provide detailed information about CVE-2025-23934

CVE:CVE-2025-23934
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PromoSimple Giveaways and Contests by PromoSimple allows Stored XSS.This issue affects Giveaways and Contests by PromoSimple: from n/a through 1.24.
published:2025-01-16T21:15:35.367


Instruction: Please provide detailed information about CVE-2025-23935

CVE:CVE-2025-23935
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magic Plugin Factory Magic Google Maps allows Stored XSS.  This issue affects Magic Google Maps: from n/a through 1.0.4.
published:2025-01-16T21:15:35.513


Instruction: Please provide detailed information about CVE-2025-23936

CVE:CVE-2025-23936
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Harun R. Rayhan (Cr@zy Coder) CC Circle Progress Bar allows Stored XSS.This issue affects CC Circle Progress Bar: from n/a through 1.0.0.
published:2025-01-16T21:15:35.677


Instruction: Please provide detailed information about CVE-2025-23939

CVE:CVE-2025-23939
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiem Khan Image Switcher allows Stored XSS.This issue affects Image Switcher: from n/a through 1.1.
published:2025-01-16T21:15:35.910


Instruction: Please provide detailed information about CVE-2025-23940

CVE:CVE-2025-23940
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiem Khan Image Switcher allows Stored XSS.This issue affects Image Switcher: from n/a through 0.1.1.
published:2025-01-16T21:15:36.087


Instruction: Please provide detailed information about CVE-2025-23941

CVE:CVE-2025-23941
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meinturnierplan.de Team MeinTurnierplan.de Widget Viewer allows Stored XSS.This issue affects MeinTurnierplan.de Widget Viewer: from n/a through 1.1.
published:2025-01-16T21:15:36.230


Instruction: Please provide detailed information about CVE-2025-23943

CVE:CVE-2025-23943
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arul PDF.js Shortcode allows Stored XSS.This issue affects PDF.js Shortcode: from n/a through 1.0.
published:2025-01-16T21:15:36.373


Instruction: Please provide detailed information about CVE-2025-23946

CVE:CVE-2025-23946
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in le Pixel Solitaire Enhanced YouTube Shortcode allows Stored XSS.This issue affects Enhanced YouTube Shortcode: from n/a through 2.0.1.
published:2025-01-16T21:15:36.520


Instruction: Please provide detailed information about CVE-2025-23947

CVE:CVE-2025-23947
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M.J WP-Player allows Stored XSS.This issue affects WP-Player: from n/a through 2.6.1.
published:2025-01-16T21:15:36.670


Instruction: Please provide detailed information about CVE-2025-23950

CVE:CVE-2025-23950
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Said Shiripour EZPlayer allows Stored XSS.This issue affects EZPlayer: from n/a through 1.0.10.
published:2025-01-16T21:15:36.817


Instruction: Please provide detailed information about CVE-2025-23951

CVE:CVE-2025-23951
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DivEngine Gallery: Hybrid – Advanced Visual Gallery allows Stored XSS.This issue affects Gallery: Hybrid – Advanced Visual Gallery: from n/a through 1.4.0.2.
published:2025-01-16T21:15:36.983


Instruction: Please provide detailed information about CVE-2025-23954

CVE:CVE-2025-23954
Description:Missing Authorization vulnerability in AWcode & KingfisherFox Salvador – AI Image Generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salvador – AI Image Generator: from n/a through 1.0.11.
published:2025-01-16T21:15:37.133


Instruction: Please provide detailed information about CVE-2025-23955

CVE:CVE-2025-23955
Description:Missing Authorization vulnerability in xola.com Xola allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xola: from n/a through 1.6.
published:2025-01-16T21:15:37.277


Instruction: Please provide detailed information about CVE-2025-23957

CVE:CVE-2025-23957
Description:Missing Authorization vulnerability in Sur.ly Sur.ly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sur.ly: from n/a through 3.0.3.
published:2025-01-16T21:15:37.420


Instruction: Please provide detailed information about CVE-2025-23961

CVE:CVE-2025-23961
Description:Missing Authorization vulnerability in WP Tasker WordPress Graphs & Charts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Graphs & Charts: from n/a through 2.0.8.
published:2025-01-16T21:15:37.573


Instruction: Please provide detailed information about CVE-2025-23962

CVE:CVE-2025-23962
Description:Missing Authorization vulnerability in Goldstar Goldstar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Goldstar: from n/a through 2.1.1.
published:2025-01-16T21:15:37.730


Instruction: Please provide detailed information about CVE-2025-23963

CVE:CVE-2025-23963
Description:Missing Authorization vulnerability in Sven Hofmann & Michael Schoenrock Mark Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mark Posts: from n/a through 2.2.3.
published:2025-01-16T21:15:37.873


Instruction: Please provide detailed information about CVE-2025-23965

CVE:CVE-2025-23965
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kopatheme Kopa Nictitate Toolkit allows Stored XSS.This issue affects Kopa Nictitate Toolkit: from n/a through 1.0.2.
published:2025-01-16T21:15:38.023


Instruction: Please provide detailed information about CVE-2025-23198

CVE:CVE-2025-23198
Description:librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameters (Replace $DEVICE_ID with your specific $DEVICE_ID value):`/device/$DEVICE_ID/edit` -> param: display. Librenms versions up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure. This issue has been addressed in release version 24.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-01-16T23:15:08.410


Instruction: Please provide detailed information about CVE-2025-23199

CVE:CVE-2025-23199
Description:librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameter: `/ajax_form.php` -> param: descr. Librenms version up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure. This issue has been addressed in release version 24.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-01-16T23:15:08.567


Instruction: Please provide detailed information about CVE-2025-23200

CVE:CVE-2025-23200
Description:librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to a stored XSS on the parameter: `ajax_form.php` -> param: state. Librenms versions up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure. This issue has been addressed in release version 24.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-01-16T23:15:08.720


Instruction: Please provide detailed information about CVE-2025-23201

CVE:CVE-2025-23201
Description:librenms is a community-based GPL-licensed network monitoring system. Affected versions are subject to Cross-site Scripting (XSS) on the parameters:`/addhost` -> param: community. Librenms versions up to 24.10.1 allow remote attackers to inject malicious scripts. When a user views or interacts with the page displaying the data, the malicious script executes immediately, leading to potential unauthorized actions or data exposure. This issue has been addressed in release version 24.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-01-16T23:15:08.880


Instruction: Please provide detailed information about CVE-2025-21325

CVE:CVE-2025-21325
Description:Windows Secure Kernel Mode Elevation of Privilege Vulnerability
published:2025-01-17T01:15:31.073


Instruction: Please provide detailed information about CVE-2025-0527

CVE:CVE-2025-0527
Description:A vulnerability classified as critical was found in code-projects Admission Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /signupconfirm.php. The manipulation of the argument in_eml leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
published:2025-01-17T14:15:32.840


Instruction: Please provide detailed information about CVE-2025-0528

CVE:CVE-2025-0528
Description:A vulnerability, which was classified as critical, has been found in Tenda AC8, AC10 and AC18 16.03.10.20. Affected by this issue is some unknown functionality of the file /goform/telnet of the component HTTP Request Handler. The manipulation leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-17T15:15:12.430


Instruction: Please provide detailed information about CVE-2025-0529

CVE:CVE-2025-0529
Description:A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This affects an unknown part of the component Login Form. The manipulation of the argument username leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
published:2025-01-17T15:15:12.670


Instruction: Please provide detailed information about CVE-2025-0530

CVE:CVE-2025-0530
Description:A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. This vulnerability affects unknown code of the file /_parse/_feedback_system.php. The manipulation of the argument type leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-17T16:15:33.937


Instruction: Please provide detailed information about CVE-2025-0531

CVE:CVE-2025-0531
Description:A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/leaveroom.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-17T16:15:34.250


Instruction: Please provide detailed information about CVE-2025-0430

CVE:CVE-2025-0430
Description:Belledonne Communications Linphone-Desktop   is vulnerable to a NULL Dereference vulnerability, which could allow a remote attacker to create a denial-of-service condition.
published:2025-01-17T18:15:30.920


Instruction: Please provide detailed information about CVE-2025-0532

CVE:CVE-2025-0532
Description:A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/new_submit.php. The manipulation of the argument m_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-17T18:15:31.237


Instruction: Please provide detailed information about CVE-2025-0533

CVE:CVE-2025-0533
Description:A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Code/sc_login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-17T18:15:31.577


Instruction: Please provide detailed information about CVE-2025-0534

CVE:CVE-2025-0534
Description:A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Code/loginnew.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-17T19:15:28.777


Instruction: Please provide detailed information about CVE-2025-0535

CVE:CVE-2025-0535
Description:A vulnerability classified as critical has been found in Codezips Gym Management System 1.0. This affects an unknown part of the file /dashboard/admin/edit_mem_submit.php. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-17T19:15:28.990


Instruction: Please provide detailed information about CVE-2025-0536

CVE:CVE-2025-0536
Description:A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/edit_action.php. The manipulation of the argument attendance_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-17T20:15:29.583


Instruction: Please provide detailed information about CVE-2025-0537

CVE:CVE-2025-0537
Description:A vulnerability, which was classified as problematic, has been found in code-projects Car Rental Management System 1.0. This issue affects some unknown processing of the file /admin/manage-pages.php. The manipulation of the argument pgdetails leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-17T20:15:29.767


Instruction: Please provide detailed information about CVE-2025-21185

CVE:CVE-2025-21185
Description:Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
published:2025-01-17T20:15:30.227


Instruction: Please provide detailed information about CVE-2025-21399

CVE:CVE-2025-21399
Description:Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
published:2025-01-17T20:15:46.117


Instruction: Please provide detailed information about CVE-2025-0538

CVE:CVE-2025-0538
Description:A vulnerability, which was classified as problematic, was found in code-projects Tourism Management System 1.0. Affected is an unknown function of the file /admin/manage-pages.php. The manipulation of the argument pgedetails leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-17T21:15:10.847


Instruction: Please provide detailed information about CVE-2025-0540

CVE:CVE-2025-0540
Description:A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /expadd.php. The manipulation of the argument expcat leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-17T21:15:11.037


Instruction: Please provide detailed information about CVE-2025-21606

CVE:CVE-2025-21606
Description:stats is a macOS system monitor in for the menu bar. The Stats application is vulnerable to a local privilege escalation due to the insecure implementation of its XPC service. The application registers a Mach service under the name `eu.exelban.Stats.SMC.Helper`. The associated binary, eu.exelban.Stats.SMC.Helper, is a privileged helper tool designed to execute actions requiring elevated privileges on behalf of the client, such as setting fan modes, adjusting fan speeds, and executing the `powermetrics` command. The root cause of this vulnerability lies in the `shouldAcceptNewConnection` method, which unconditionally returns YES (or true), allowing any XPC client to connect to the service without any form of verification. As a result, unauthorized clients can establish a connection to the Mach service and invoke methods exposed by the HelperTool interface. An attacker can exploit this vulnerability to modify the hardware settings of the user’s device and execute arbitrary code with root privileges. This issue has been addressed in version 2.11.21 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-01-17T21:15:11.420


Instruction: Please provide detailed information about CVE-2025-23039

CVE:CVE-2025-23039
Description:Caido is a web security auditing toolkit. A Cross-Site Scripting (XSS) vulnerability was identified in Caido v0.45.0 due to improper sanitization in the URL decoding tooltip of HTTP request and response editors. This issue could allow an attacker to execute arbitrary scripts, potentially leading to the theft of sensitive information. This issue has been addressed in version 0.45.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-01-17T21:15:11.560


Instruction: Please provide detailed information about CVE-2025-23202

CVE:CVE-2025-23202
Description:Bible Module is a tool designed for ROBLOX developers to integrate Bible functionality into their games. The `FetchVerse` and `FetchPassage` functions in the Bible Module are susceptible to injection attacks due to the absence of input validation. This vulnerability could allow an attacker to manipulate the API request URLs, potentially leading to unauthorized access or data tampering. This issue has been addressed in version 0.0.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-01-17T21:15:11.713


Instruction: Please provide detailed information about CVE-2025-23205

CVE:CVE-2025-23205
Description:nbgrader is a system for assigning and grading notebooks. Enabling frame-ancestors: 'self' grants any JupyterHub user the ability to extract formgrader content by sending malicious links to users with access to formgrader, at least when using the default JupyterHub configuration of `enable_subdomains = False`. #1915 disables a protection which would allow user Alice to craft a page embedding formgrader in an IFrame. If Bob visits that page, his credentials will be sent and the formgrader page loaded. Because Alice's page is on the same Origin as the formgrader iframe, Javasript on Alice's page has _full access_ to the contents of the page served by formgrader using Bob's credentials. This issue has been addressed in release 0.9.5 and all users are advised to upgrade. Users unable to upgrade may disable `frame-ancestors: self`, or enable per-user and per-service subdomains with `JupyterHub.enable_subdomains = True` (then even if embedding in an IFrame is allowed, the host page does not have access to the contents of the frame).
published:2025-01-17T21:15:11.850


Instruction: Please provide detailed information about CVE-2025-23206

CVE:CVE-2025-23206
Description:The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints as part of the custom resource workflow. However, the current `tls.connect` method will always set `rejectUnauthorized: false` which is a potential security concern. CDK should follow the best practice and set `rejectUnauthorized: true`. However, this could be a breaking change for existing CDK applications and we should fix this with a feature flag. Note that this is marked as low severity Security advisory because the issuer url is provided by CDK users who define the CDK application. If they insist on connecting to a unauthorized OIDC provider, CDK should not disallow this. Additionally, the code block is run in a Lambda environment which mitigate the MITM attack. The patch is in progress. To mitigate, upgrade to CDK v2.177.0 (Expected release date 2025-02-22). Once upgraded, users should make sure the feature flag '@aws-cdk/aws-iam:oidcRejectUnauthorizedConnections' is set to true in `cdk.context.json` or `cdk.json`. There are no known workarounds for this vulnerability.
published:2025-01-17T21:15:12.003


Instruction: Please provide detailed information about CVE-2025-0541

CVE:CVE-2025-0541
Description:A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/edit_member.php. The manipulation of the argument name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
published:2025-01-17T22:15:29.337


Instruction: Please provide detailed information about CVE-2025-23207

CVE:CVE-2025-23207
Description:KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions with `renderToString` could encounter malicious input using `\htmlData` that runs arbitrary JavaScript, or generate invalid HTML. Users are advised to upgrade to KaTeX v0.16.21 to remove this vulnerability. Users unable to upgrade should avoid use of or turn off the `trust` option, or set it to forbid `\htmlData` commands, forbid inputs containing the substring `"\\htmlData"` and sanitize HTML output from KaTeX.
published:2025-01-17T22:15:29.523


Instruction: Please provide detailed information about CVE-2025-23208

CVE:CVE-2025-23208
Description:zot is a production-ready vendor-neutral OCI image registry. The group data stored for users in the boltdb database (meta.db) is an append-list so group revocations/removals are ignored in the API. SetUserGroups is alled on login, but instead of replacing the group memberships, they are appended. This may be due to some conflict with the group definitions in the config file, but that wasn't obvious to me if it were the case. Any Zot configuration that relies on group-based authorization will not respect group remove/revocation by an IdP. This issue has been addressed in version 2.1.2. All users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-01-17T23:15:13.107


Instruction: Please provide detailed information about CVE-2025-23209

CVE:CVE-2025-23209
Description:Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running an unpatched version of Craft with a compromised security key is affected. This vulnerability has been patched in Craft 5.5.8 and 4.13.8. Users who cannot update to a patched version, should rotate their security keys and ensure their privacy to help migitgate the issue.
published:2025-01-18T01:15:07.633


Instruction: Please provide detailed information about CVE-2025-0308

CVE:CVE-2025-0308
Description:The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the search parameter in all versions up to, and including, 2.9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
published:2025-01-18T06:15:27.880


Instruction: Please provide detailed information about CVE-2025-0318

CVE:CVE-2025-0318
Description:The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.9.1 through different error messages in the responses. This makes it possible for unauthenticated attackers to exfiltrate data from wp_usermeta table.
published:2025-01-18T06:15:28.017


Instruction: Please provide detailed information about CVE-2025-0554

CVE:CVE-2025-0554
Description:The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Feed Name value in version <= 4.1.25 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
published:2025-01-18T06:15:28.160


Instruction: Please provide detailed information about CVE-2025-0369

CVE:CVE-2025-0369
Description:The JetEngine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘list_tag’ parameter in all versions up to, and including, 3.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-01-18T07:15:09.720


Instruction: Please provide detailed information about CVE-2025-0515

CVE:CVE-2025-0515
Description:The Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'cmsmasters_hide_admin_notice' function in all versions up to, and including, 2.0.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to 'hide' on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration.
published:2025-01-18T07:15:09.903


Instruction: Please provide detailed information about CVE-2025-0557

CVE:CVE-2025-0557
Description:A vulnerability classified as problematic has been found in Hyland Alfresco Community Edition and Alfresco Enterprise Edition up to 6.2.2. This affects an unknown part of the file /share/s/ of the component URL Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-01-18T09:15:07.710


Instruction: Please provide detailed information about CVE-2025-0558

CVE:CVE-2025-0558
Description:A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java. The manipulation of the argument color leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-01-18T13:15:20.417


Instruction: Please provide detailed information about CVE-2025-0559

CVE:CVE-2025-0559
Description:A vulnerability, which was classified as problematic, has been found in Campcodes School Management Software 1.0. This issue affects some unknown processing of the file /create-id-card of the component Create Id Card Page. The manipulation of the argument ID Card Title leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-18T14:15:25.420


Instruction: Please provide detailed information about CVE-2025-0560

CVE:CVE-2025-0560
Description:A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /photo-gallery of the component Photo Gallery Page. The manipulation of the argument Description leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-18T15:15:08.343


Instruction: Please provide detailed information about CVE-2025-0561

CVE:CVE-2025-0561
Description:A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-pig.php. The manipulation of the argument pigno leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-19T00:15:25.077


Instruction: Please provide detailed information about CVE-2025-0562

CVE:CVE-2025-0562
Description:A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/health_status_entry.php. The manipulation of the argument usrid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-19T02:15:24.380


Instruction: Please provide detailed information about CVE-2025-0563

CVE:CVE-2025-0563
Description:A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been classified as critical. Affected is an unknown function of the file /dash/update.php. The manipulation of the argument uname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-19T02:15:24.560


Instruction: Please provide detailed information about CVE-2025-0564

CVE:CVE-2025-0564
Description:A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /authenticate.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-19T04:15:07.090


Instruction: Please provide detailed information about CVE-2025-0565

CVE:CVE-2025-0565
Description:A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-19T06:15:06.820


Instruction: Please provide detailed information about CVE-2025-0566

CVE:CVE-2025-0566
Description:A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13. This affects the function formSetDevNetName of the file /goform/SetDevNetName. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-19T07:15:06.407


Instruction: Please provide detailed information about CVE-2025-0567

CVE:CVE-2025-0567
Description:A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulation leads to untrusted search path. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitation appears to be difficult.
published:2025-01-19T08:15:06.637


Instruction: Please provide detailed information about CVE-2025-21631

CVE:CVE-2025-21631
Description:In the Linux kernel, the following vulnerability has been resolved:  block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()  Our syzkaller report a following UAF for v6.6:  BUG: KASAN: slab-use-after-free in bfq_init_rq+0x175d/0x17a0 block/bfq-iosched.c:6958 Read of size 8 at addr ffff8881b57147d8 by task fsstress/232726  CPU: 2 PID: 232726 Comm: fsstress Not tainted 6.6.0-g3629d1885222 #39 Call Trace:  <TASK>  __dump_stack lib/dump_stack.c:88 [inline]  dump_stack_lvl+0x91/0xf0 lib/dump_stack.c:106  print_address_description.constprop.0+0x66/0x300 mm/kasan/report.c:364  print_report+0x3e/0x70 mm/kasan/report.c:475  kasan_report+0xb8/0xf0 mm/kasan/report.c:588  hlist_add_head include/linux/list.h:1023 [inline]  bfq_init_rq+0x175d/0x17a0 block/bfq-iosched.c:6958  bfq_insert_request.isra.0+0xe8/0xa20 block/bfq-iosched.c:6271  bfq_insert_requests+0x27f/0x390 block/bfq-iosched.c:6323  blk_mq_insert_request+0x290/0x8f0 block/blk-mq.c:2660  blk_mq_submit_bio+0x1021/0x15e0 block/blk-mq.c:3143  __submit_bio+0xa0/0x6b0 block/blk-core.c:639  __submit_bio_noacct_mq block/blk-core.c:718 [inline]  submit_bio_noacct_nocheck+0x5b7/0x810 block/blk-core.c:747  submit_bio_noacct+0xca0/0x1990 block/blk-core.c:847  __ext4_read_bh fs/ext4/super.c:205 [inline]  ext4_read_bh+0x15e/0x2e0 fs/ext4/super.c:230  __read_extent_tree_block+0x304/0x6f0 fs/ext4/extents.c:567  ext4_find_extent+0x479/0xd20 fs/ext4/extents.c:947  ext4_ext_map_blocks+0x1a3/0x2680 fs/ext4/extents.c:4182  ext4_map_blocks+0x929/0x15a0 fs/ext4/inode.c:660  ext4_iomap_begin_report+0x298/0x480 fs/ext4/inode.c:3569  iomap_iter+0x3dd/0x1010 fs/iomap/iter.c:91  iomap_fiemap+0x1f4/0x360 fs/iomap/fiemap.c:80  ext4_fiemap+0x181/0x210 fs/ext4/extents.c:5051  ioctl_fiemap.isra.0+0x1b4/0x290 fs/ioctl.c:220  do_vfs_ioctl+0x31c/0x11a0 fs/ioctl.c:811  __do_sys_ioctl fs/ioctl.c:869 [inline]  __se_sys_ioctl+0xae/0x190 fs/ioctl.c:857  do_syscall_x64 arch/x86/entry/common.c:51 [inline]  do_syscall_64+0x70/0x120 arch/x86/entry/common.c:81  entry_SYSCALL_64_after_hwframe+0x78/0xe2  Allocated by task 232719:  kasan_save_stack+0x22/0x50 mm/kasan/common.c:45  kasan_set_track+0x25/0x30 mm/kasan/common.c:52  __kasan_slab_alloc+0x87/0x90 mm/kasan/common.c:328  kasan_slab_alloc include/linux/kasan.h:188 [inline]  slab_post_alloc_hook mm/slab.h:768 [inline]  slab_alloc_node mm/slub.c:3492 [inline]  kmem_cache_alloc_node+0x1b8/0x6f0 mm/slub.c:3537  bfq_get_queue+0x215/0x1f00 block/bfq-iosched.c:5869  bfq_get_bfqq_handle_split+0x167/0x5f0 block/bfq-iosched.c:6776  bfq_init_rq+0x13a4/0x17a0 block/bfq-iosched.c:6938  bfq_insert_request.isra.0+0xe8/0xa20 block/bfq-iosched.c:6271  bfq_insert_requests+0x27f/0x390 block/bfq-iosched.c:6323  blk_mq_insert_request+0x290/0x8f0 block/blk-mq.c:2660  blk_mq_submit_bio+0x1021/0x15e0 block/blk-mq.c:3143  __submit_bio+0xa0/0x6b0 block/blk-core.c:639  __submit_bio_noacct_mq block/blk-core.c:718 [inline]  submit_bio_noacct_nocheck+0x5b7/0x810 block/blk-core.c:747  submit_bio_noacct+0xca0/0x1990 block/blk-core.c:847  __ext4_read_bh fs/ext4/super.c:205 [inline]  ext4_read_bh_nowait+0x15a/0x240 fs/ext4/super.c:217  ext4_read_bh_lock+0xac/0xd0 fs/ext4/super.c:242  ext4_bread_batch+0x268/0x500 fs/ext4/inode.c:958  __ext4_find_entry+0x448/0x10f0 fs/ext4/namei.c:1671  ext4_lookup_entry fs/ext4/namei.c:1774 [inline]  ext4_lookup.part.0+0x359/0x6f0 fs/ext4/namei.c:1842  ext4_lookup+0x72/0x90 fs/ext4/namei.c:1839  __lookup_slow+0x257/0x480 fs/namei.c:1696  lookup_slow fs/namei.c:1713 [inline]  walk_component+0x454/0x5c0 fs/namei.c:2004  link_path_walk.part.0+0x773/0xda0 fs/namei.c:2331  link_path_walk fs/namei.c:3826 [inline]  path_openat+0x1b9/0x520 fs/namei.c:3826  do_filp_open+0x1b7/0x400 fs/namei.c:3857  do_sys_openat2+0x5dc/0x6e0 fs/open.c:1428  do_sys_open fs/open.c:1443 [inline]  __do_sys_openat fs/open.c:1459 [inline]  __se_sys_openat fs/open.c:1454 [inline]  __x64_sys_openat+0x148/0x200 fs/open.c:1454  do_syscall_x64 arch/x86/entry/common.c:51 [inline]  do_syscall_6 ---truncated---
published:2025-01-19T11:15:07.667