Instruction: Please provide detailed information about CVE-2025-1843

CVE:CVE-2025-1843
Description:A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211. This issue affects the function select of the file com/xq/tmall/dao/ProductMapper.java. The manipulation of the argument orderBy leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-03T01:15:11.127


Instruction: Please provide detailed information about CVE-2025-25948

CVE:CVE-2025-25948
Description:Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.
published:2025-03-03T01:15:11.310


Instruction: Please provide detailed information about CVE-2025-25949

CVE:CVE-2025-25949
Description:A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the User ID parameter at /rest/staffResource/update.
published:2025-03-03T01:15:11.423


Instruction: Please provide detailed information about CVE-2025-25950

CVE:CVE-2025-25950
Description:Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.
published:2025-03-03T01:15:11.533


Instruction: Please provide detailed information about CVE-2025-25951

CVE:CVE-2025-25951
Description:An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information.
published:2025-03-03T01:15:11.660


Instruction: Please provide detailed information about CVE-2025-25952

CVE:CVE-2025-25952
Description:An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request.
published:2025-03-03T01:15:11.777


Instruction: Please provide detailed information about CVE-2025-25953

CVE:CVE-2025-25953
Description:Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.
published:2025-03-03T01:15:11.910


Instruction: Please provide detailed information about CVE-2025-27583

CVE:CVE-2025-27583
Description:Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.
published:2025-03-03T01:15:12.030


Instruction: Please provide detailed information about CVE-2025-27584

CVE:CVE-2025-27584
Description:A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the First Name parameter at /rest/staffResource/update.
published:2025-03-03T01:15:12.157


Instruction: Please provide detailed information about CVE-2025-27585

CVE:CVE-2025-27585
Description:A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Print Name parameter at /rest/staffResource/update.
published:2025-03-03T01:15:12.277


Instruction: Please provide detailed information about CVE-2025-1844

CVE:CVE-2025-1844
Description:A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-03T02:15:33.390


Instruction: Please provide detailed information about CVE-2025-1845

CVE:CVE-2025-1845
Description:A vulnerability has been found in ESAFENET DSM 3.1.2 and classified as critical. Affected by this vulnerability is the function examExportPDF of the file /admin/plan/examExportPDF. The manipulation of the argument s leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-03T02:15:33.563


Instruction: Please provide detailed information about CVE-2025-1846

CVE:CVE-2025-1846
Description:A vulnerability was found in zj1983 zz up to 2024-8. It has been declared as problematic. This vulnerability affects the function deleteLocalFile of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.java of the component File Handler. The manipulation of the argument zids leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-03T03:15:08.777


Instruction: Please provide detailed information about CVE-2025-1847

CVE:CVE-2025-1847
Description:A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-03T03:15:08.983


Instruction: Please provide detailed information about CVE-2025-20644

CVE:CVE-2025-20644
Description:In Modem, there is a possible memory corruption due to incorrect error handling. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01525673; Issue ID: MSV-2747.
published:2025-03-03T03:15:09.173


Instruction: Please provide detailed information about CVE-2025-20645

CVE:CVE-2025-20645
Description:In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599.
published:2025-03-03T03:15:09.293


Instruction: Please provide detailed information about CVE-2025-20646

CVE:CVE-2025-20646
Description:In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803.
published:2025-03-03T03:15:09.403


Instruction: Please provide detailed information about CVE-2025-20647

CVE:CVE-2025-20647
Description:In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00791311 /  MOLY01067019; Issue ID: MSV-2721.
published:2025-03-03T03:15:09.510


Instruction: Please provide detailed information about CVE-2025-20648

CVE:CVE-2025-20648
Description:In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09456673; Issue ID: MSV-2584.
published:2025-03-03T03:15:09.620


Instruction: Please provide detailed information about CVE-2025-20649

CVE:CVE-2025-20649
Description:In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00396437; Issue ID: MSV-2184.
published:2025-03-03T03:15:09.730


Instruction: Please provide detailed information about CVE-2025-20650

CVE:CVE-2025-20650
Description:In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291294; Issue ID: MSV-2061.
published:2025-03-03T03:15:09.840


Instruction: Please provide detailed information about CVE-2025-20651

CVE:CVE-2025-20651
Description:In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291294; Issue ID: MSV-2062.
published:2025-03-03T03:15:09.950


Instruction: Please provide detailed information about CVE-2025-20652

CVE:CVE-2025-20652
Description:In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291215; Issue ID: MSV-2052.
published:2025-03-03T03:15:10.060


Instruction: Please provide detailed information about CVE-2025-20653

CVE:CVE-2025-20653
Description:In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291064; Issue ID: MSV-2046.
published:2025-03-03T03:15:10.170


Instruction: Please provide detailed information about CVE-2025-1848

CVE:CVE-2025-1848
Description:A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the file /import_data_check. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-03T04:15:08.657


Instruction: Please provide detailed information about CVE-2025-1849

CVE:CVE-2025-1849
Description:A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is an unknown functionality of the file /import_data_todb. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-03T04:15:08.837


Instruction: Please provide detailed information about CVE-2025-27590

CVE:CVE-2025-27590
Description:In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web.
published:2025-03-03T04:15:09.020


Instruction: Please provide detailed information about CVE-2025-1850

CVE:CVE-2025-1850
Description:A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by this issue is some unknown functionality of the file /university.php. The manipulation of the argument book_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-03T05:15:10.587


Instruction: Please provide detailed information about CVE-2025-1851

CVE:CVE-2025-1851
Description:A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-03T05:15:10.867


Instruction: Please provide detailed information about CVE-2025-1852

CVE:CVE-2025-1852
Description:A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-03T06:15:21.343


Instruction: Please provide detailed information about CVE-2025-1853

CVE:CVE-2025-1853
Description:A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub_49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-03T06:15:21.697


Instruction: Please provide detailed information about CVE-2025-1854

CVE:CVE-2025-1854
Description:A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/del_member.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-03T07:15:35.030


Instruction: Please provide detailed information about CVE-2025-1855

CVE:CVE-2025-1855
Description:A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-03T07:15:35.277


Instruction: Please provide detailed information about CVE-2025-1723

CVE:CVE-2025-1723
Description:Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug.
published:2025-03-03T08:15:15.717


Instruction: Please provide detailed information about CVE-2025-1856

CVE:CVE-2025-1856
Description:A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/gen_invoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-03T08:15:16.303


Instruction: Please provide detailed information about CVE-2025-1857

CVE:CVE-2025-1857
Description:A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file /check_availability.php. The manipulation of the argument employeeid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-03T08:15:16.823


Instruction: Please provide detailed information about CVE-2025-1858

CVE:CVE-2025-1858
Description:A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-03T09:15:38.857


Instruction: Please provide detailed information about CVE-2025-1859

CVE:CVE-2025-1859
Description:A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some unknown processing of the file /login.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-03T09:15:39.037


Instruction: Please provide detailed information about CVE-2025-1864

CVE:CVE-2025-1864
Description:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9.
published:2025-03-03T09:15:39.210


Instruction: Please provide detailed information about CVE-2025-1866

CVE:CVE-2025-1866
Description:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access. This issue affects libwebsockets before 4.3.4 and is present in code built specifically for the Win32 platform.  By default, the affected code is not executed unless one of the following conditions is met:  LWS_WITHOUT_EXTENSIONS (default ON) is manually set to OFF in CMake. LWS_WITH_HTTP_STREAM_COMPRESSION (default OFF) is manually set to ON in CMake. Despite these conditions, when triggered in affected configurations, this vulnerability may allow attackers to manipulate pointers, potentially leading to memory corruption or unexpected behavior.
published:2025-03-03T09:15:39.370


Instruction: Please provide detailed information about CVE-2025-1867

CVE:CVE-2025-1867
Description:Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in ithewei libhv allows HTTP Response Smuggling.This issue affects libhv: through 1.3.3.
published:2025-03-03T09:15:39.520


Instruction: Please provide detailed information about CVE-2025-24654

CVE:CVE-2025-24654
Description:Missing Authorization vulnerability in SEO Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.4.05.
published:2025-03-03T09:15:39.660


Instruction: Please provide detailed information about CVE-2025-24846

CVE:CVE-2025-24846
Description:Authentication bypass vulnerability exists in FutureNet AS series (Industrial Routers) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request.
published:2025-03-03T09:15:39.817


Instruction: Please provide detailed information about CVE-2025-25280

CVE:CVE-2025-25280
Description:Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request.
published:2025-03-03T09:15:39.990


Instruction: Please provide detailed information about CVE-2025-0475

CVE:CVE-2025-0475
Description:An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1. A proxy feature could potentially allow unintended content rendering leading to XSS under specific circumstances.
published:2025-03-03T11:15:15.517


Instruction: Please provide detailed information about CVE-2025-1868

CVE:CVE-2025-1868
Description:Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by intercepting network traffic to a legitimate server or by setting up a fake server, in both local and remote scenarios. This exposure is relevant for both HTTP/HTTPS and SMB protocols.
published:2025-03-03T11:15:15.657


Instruction: Please provide detailed information about CVE-2025-21424

CVE:CVE-2025-21424
Description:Memory corruption while calling the NPU driver APIs concurrently.
published:2025-03-03T11:15:15.810


Instruction: Please provide detailed information about CVE-2025-1869

CVE:CVE-2025-1869
Description:SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/check_avalability.php.
published:2025-03-03T13:15:11.950


Instruction: Please provide detailed information about CVE-2025-1870

CVE:CVE-2025-1870
Description:SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagedescription" parameter in admin/aboutus.php.
published:2025-03-03T13:15:12.113


Instruction: Please provide detailed information about CVE-2025-1871

CVE:CVE-2025-1871
Description:SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php.
published:2025-03-03T13:15:12.253


Instruction: Please provide detailed information about CVE-2025-1872

CVE:CVE-2025-1872
Description:SQL injection vulnerability have been found in 101news affecting version 1.0 through the "sadminusername" parameter in admin/add-subadmins.php.
published:2025-03-03T13:15:12.400


Instruction: Please provide detailed information about CVE-2025-1873

CVE:CVE-2025-1873
Description:SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php.
published:2025-03-03T13:15:12.547


Instruction: Please provide detailed information about CVE-2025-1874

CVE:CVE-2025-1874
Description:SQL injection vulnerability have been found in 101news affecting version 1.0 through the "description" parameter in admin/add-category.php.
published:2025-03-03T13:15:12.693


Instruction: Please provide detailed information about CVE-2025-1875

CVE:CVE-2025-1875
Description:SQL injection vulnerability have been found in 101news affecting version 1.0 through the "searchtitle" parameter in search.php.
published:2025-03-03T13:15:12.837


Instruction: Please provide detailed information about CVE-2025-23425

CVE:CVE-2025-23425
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in marekki Marekkis Watermark allows Reflected XSS. This issue affects Marekkis Watermark: from n/a through 0.9.4.
published:2025-03-03T14:15:34.600


Instruction: Please provide detailed information about CVE-2025-23433

CVE:CVE-2025-23433
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jnwry vcOS allows Reflected XSS. This issue affects vcOS: from n/a through 1.4.0.
published:2025-03-03T14:15:34.750


Instruction: Please provide detailed information about CVE-2025-23437

CVE:CVE-2025-23437
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound ntp-header-images allows Reflected XSS. This issue affects ntp-header-images: from n/a through 1.2.
published:2025-03-03T14:15:34.890


Instruction: Please provide detailed information about CVE-2025-23439

CVE:CVE-2025-23439
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in willshouse TinyMCE Extended Config allows Reflected XSS. This issue affects TinyMCE Extended Config: from n/a through 0.1.0.
published:2025-03-03T14:15:35.047


Instruction: Please provide detailed information about CVE-2025-23440

CVE:CVE-2025-23440
Description:Missing Authorization vulnerability in radicaldesigns radSLIDE allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects radSLIDE: from n/a through 2.1.
published:2025-03-03T14:15:35.217


Instruction: Please provide detailed information about CVE-2025-23441

CVE:CVE-2025-23441
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Attach Gallery Posts allows Reflected XSS. This issue affects Attach Gallery Posts: from n/a through 1.6.
published:2025-03-03T14:15:35.360


Instruction: Please provide detailed information about CVE-2025-23446

CVE:CVE-2025-23446
Description:Cross-Site Request Forgery (CSRF) vulnerability in NotFound WP SpaceContent allows Stored XSS. This issue affects WP SpaceContent: from n/a through 0.4.5.
published:2025-03-03T14:15:35.500


Instruction: Please provide detailed information about CVE-2025-23447

CVE:CVE-2025-23447
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Smooth Dynamic Slider allows Reflected XSS. This issue affects Smooth Dynamic Slider: from n/a through 1.0.
published:2025-03-03T14:15:35.637


Instruction: Please provide detailed information about CVE-2025-23450

CVE:CVE-2025-23450
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in agenwebsite AW WooCommerce Kode Pembayaran allows Reflected XSS. This issue affects AW WooCommerce Kode Pembayaran: from n/a through 1.1.4.
published:2025-03-03T14:15:35.780


Instruction: Please provide detailed information about CVE-2025-23451

CVE:CVE-2025-23451
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Awesome Twitter Feeds allows Reflected XSS. This issue affects Awesome Twitter Feeds: from n/a through 1.0.
published:2025-03-03T14:15:35.920


Instruction: Please provide detailed information about CVE-2025-23464

CVE:CVE-2025-23464
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Twitter News Feed allows Reflected XSS. This issue affects Twitter News Feed: from n/a through 1.1.1.
published:2025-03-03T14:15:36.070


Instruction: Please provide detailed information about CVE-2025-23465

CVE:CVE-2025-23465
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Vampire Character Manager allows Reflected XSS. This issue affects Vampire Character Manager: from n/a through 2.13.
published:2025-03-03T14:15:36.213


Instruction: Please provide detailed information about CVE-2025-23468

CVE:CVE-2025-23468
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Essay Wizard (wpCRES) allows Reflected XSS. This issue affects Essay Wizard (wpCRES): from n/a through 1.0.6.4.
published:2025-03-03T14:15:36.357


Instruction: Please provide detailed information about CVE-2025-23472

CVE:CVE-2025-23472
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Flexo Slider allows Reflected XSS. This issue affects Flexo Slider: from n/a through 1.0013.
published:2025-03-03T14:15:36.497


Instruction: Please provide detailed information about CVE-2025-23473

CVE:CVE-2025-23473
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Killer Theme Options allows Reflected XSS. This issue affects Killer Theme Options: from n/a through 2.0.
published:2025-03-03T14:15:36.633


Instruction: Please provide detailed information about CVE-2025-23478

CVE:CVE-2025-23478
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Photo Video Store allows Reflected XSS. This issue affects Photo Video Store: from n/a through 21.07.
published:2025-03-03T14:15:36.777


Instruction: Please provide detailed information about CVE-2025-23479

CVE:CVE-2025-23479
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound melascrivi allows Reflected XSS. This issue affects melascrivi: from n/a through 1.4.
published:2025-03-03T14:15:36.920


Instruction: Please provide detailed information about CVE-2025-23480

CVE:CVE-2025-23480
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound RSVP ME allows Stored XSS. This issue affects RSVP ME: from n/a through 1.9.9.
published:2025-03-03T14:15:37.060


Instruction: Please provide detailed information about CVE-2025-23481

CVE:CVE-2025-23481
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Ni WooCommerce Sales Report Email allows Reflected XSS. This issue affects Ni WooCommerce Sales Report Email: from n/a through 3.1.4.
published:2025-03-03T14:15:37.207


Instruction: Please provide detailed information about CVE-2025-23482

CVE:CVE-2025-23482
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound azurecurve Floating Featured Image allows Reflected XSS. This issue affects azurecurve Floating Featured Image: from n/a through 2.2.0.
published:2025-03-03T14:15:37.367


Instruction: Please provide detailed information about CVE-2025-23484

CVE:CVE-2025-23484
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Predict When allows Reflected XSS. This issue affects Predict When: from n/a through 1.3.
published:2025-03-03T14:15:37.507


Instruction: Please provide detailed information about CVE-2025-23485

CVE:CVE-2025-23485
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in richestsoft RS Survey allows Reflected XSS. This issue affects RS Survey: from n/a through 1.0.
published:2025-03-03T14:15:37.647


Instruction: Please provide detailed information about CVE-2025-23487

CVE:CVE-2025-23487
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Easy Gallery allows Reflected XSS. This issue affects Easy Gallery: from n/a through 1.4.
published:2025-03-03T14:15:37.787


Instruction: Please provide detailed information about CVE-2025-23488

CVE:CVE-2025-23488
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound rng-refresh allows Reflected XSS. This issue affects rng-refresh: from n/a through 1.0.
published:2025-03-03T14:15:37.930


Instruction: Please provide detailed information about CVE-2025-23490

CVE:CVE-2025-23490
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Browser-Update-Notify allows Reflected XSS. This issue affects Browser-Update-Notify: from n/a through 0.2.1.
published:2025-03-03T14:15:38.077


Instruction: Please provide detailed information about CVE-2025-23493

CVE:CVE-2025-23493
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Google Transliteration allows Reflected XSS. This issue affects Google Transliteration: from n/a through 1.7.2.
published:2025-03-03T14:15:38.213


Instruction: Please provide detailed information about CVE-2025-23494

CVE:CVE-2025-23494
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Quizzin allows Reflected XSS. This issue affects Quizzin: from n/a through 1.01.4.
published:2025-03-03T14:15:38.353


Instruction: Please provide detailed information about CVE-2025-23496

CVE:CVE-2025-23496
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP FPO allows Reflected XSS. This issue affects WP FPO: from n/a through 1.0.
published:2025-03-03T14:15:38.497


Instruction: Please provide detailed information about CVE-2025-23502

CVE:CVE-2025-23502
Description:Cross-Site Request Forgery (CSRF) vulnerability in NotFound Curated Search allows Stored XSS. This issue affects Curated Search: from n/a through 1.2.
published:2025-03-03T14:15:38.633


Instruction: Please provide detailed information about CVE-2025-23505

CVE:CVE-2025-23505
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Pit Login Welcome allows Reflected XSS. This issue affects Pit Login Welcome: from n/a through 1.1.5.
published:2025-03-03T14:15:38.777


Instruction: Please provide detailed information about CVE-2025-23515

CVE:CVE-2025-23515
Description:Missing Authorization vulnerability in tsecher ts-tree allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ts-tree: from n/a through 0.1.1.
published:2025-03-03T14:15:38.920


Instruction: Please provide detailed information about CVE-2025-23516

CVE:CVE-2025-23516
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Sale with Razorpay allows Reflected XSS. This issue affects Sale with Razorpay: from n/a through 1.0.
published:2025-03-03T14:15:39.057


Instruction: Please provide detailed information about CVE-2025-23517

CVE:CVE-2025-23517
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Google Map on Post/Page allows Reflected XSS. This issue affects Google Map on Post/Page: from n/a through 1.1.
published:2025-03-03T14:15:39.200


Instruction: Please provide detailed information about CVE-2025-23518

CVE:CVE-2025-23518
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound GoogleMapper allows Reflected XSS. This issue affects GoogleMapper: from n/a through 2.0.3.
published:2025-03-03T14:15:39.347


Instruction: Please provide detailed information about CVE-2025-23519

CVE:CVE-2025-23519
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound G Web Pro Store Locator allows Reflected XSS. This issue affects G Web Pro Store Locator: from n/a through 2.0.1.
published:2025-03-03T14:15:39.487


Instruction: Please provide detailed information about CVE-2025-23520

CVE:CVE-2025-23520
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SecureSubmit Heartland Management Terminal allows Reflected XSS. This issue affects Heartland Management Terminal: from n/a through 1.3.0.
published:2025-03-03T14:15:39.630


Instruction: Please provide detailed information about CVE-2025-23521

CVE:CVE-2025-23521
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Goodlayers Blocks allows Reflected XSS. This issue affects Goodlayers Blocks: from n/a through 1.0.1.
published:2025-03-03T14:15:39.767


Instruction: Please provide detailed information about CVE-2025-23524

CVE:CVE-2025-23524
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound ClickBank Storefront allows Reflected XSS. This issue affects ClickBank Storefront: from n/a through 1.7.
published:2025-03-03T14:15:39.900


Instruction: Please provide detailed information about CVE-2025-23526

CVE:CVE-2025-23526
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Swift Calendar Online Appointment Scheduling allows Reflected XSS. This issue affects Swift Calendar Online Appointment Scheduling: from n/a through 1.3.3.
published:2025-03-03T14:15:40.043


Instruction: Please provide detailed information about CVE-2025-23536

CVE:CVE-2025-23536
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Track Page Scroll allows Reflected XSS. This issue affects Track Page Scroll: from n/a through 1.0.2.
published:2025-03-03T14:15:40.187


Instruction: Please provide detailed information about CVE-2025-23538

CVE:CVE-2025-23538
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Contest allows Reflected XSS. This issue affects WP Contest: from n/a through 1.0.0.
published:2025-03-03T14:15:40.327


Instruction: Please provide detailed information about CVE-2025-23539

CVE:CVE-2025-23539
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Awesome Hooks allows Reflected XSS. This issue affects Awesome Hooks: from n/a through 1.0.1.
published:2025-03-03T14:15:40.470


Instruction: Please provide detailed information about CVE-2025-23549

CVE:CVE-2025-23549
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Maniac SEO allows Reflected XSS. This issue affects Maniac SEO: from n/a through 2.0.
published:2025-03-03T14:15:40.613


Instruction: Please provide detailed information about CVE-2025-23552

CVE:CVE-2025-23552
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Texteller allows Reflected XSS. This issue affects Texteller: from n/a through 1.3.0.
published:2025-03-03T14:15:40.760


Instruction: Please provide detailed information about CVE-2025-23553

CVE:CVE-2025-23553
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Cramer Userbase Access Control allows Reflected XSS. This issue affects Userbase Access Control: from n/a through 1.0.
published:2025-03-03T14:15:40.900


Instruction: Please provide detailed information about CVE-2025-23555

CVE:CVE-2025-23555
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Ui Slider Filter By Price allows Reflected XSS. This issue affects Ui Slider Filter By Price: from n/a through 1.1.
published:2025-03-03T14:15:41.040


Instruction: Please provide detailed information about CVE-2025-23556

CVE:CVE-2025-23556
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Push Envoy Notifications allows Reflected XSS. This issue affects Push Envoy Notifications: from n/a through 1.0.0.
published:2025-03-03T14:15:41.180


Instruction: Please provide detailed information about CVE-2025-23563

CVE:CVE-2025-23563
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Explore pages allows Reflected XSS. This issue affects Explore pages: from n/a through 1.01.
published:2025-03-03T14:15:41.330


Instruction: Please provide detailed information about CVE-2025-23564

CVE:CVE-2025-23564
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mohsenshahbazi WP FixTag allows Reflected XSS. This issue affects WP FixTag: from n/a through v2.0.2.
published:2025-03-03T14:15:41.470


Instruction: Please provide detailed information about CVE-2025-23565

CVE:CVE-2025-23565
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Wibstats allows Reflected XSS. This issue affects Wibstats: from n/a through 0.5.5.
published:2025-03-03T14:15:41.617


Instruction: Please provide detailed information about CVE-2025-23570

CVE:CVE-2025-23570
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Social Links allows Reflected XSS. This issue affects WP Social Links: from n/a through 0.3.1.
published:2025-03-03T14:15:42.437


Instruction: Please provide detailed information about CVE-2025-23575

CVE:CVE-2025-23575
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound DX Sales CRM allows Reflected XSS. This issue affects DX Sales CRM: from n/a through 1.1.
published:2025-03-03T14:15:42.583


Instruction: Please provide detailed information about CVE-2025-23576

CVE:CVE-2025-23576
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Intro.JS allows Reflected XSS. This issue affects WP Intro.JS: from n/a through 1.1.
published:2025-03-03T14:15:42.723


Instruction: Please provide detailed information about CVE-2025-23579

CVE:CVE-2025-23579
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound DZS Ajaxer Lite allows Stored XSS. This issue affects DZS Ajaxer Lite: from n/a through 1.04.
published:2025-03-03T14:15:42.870


Instruction: Please provide detailed information about CVE-2025-23584

CVE:CVE-2025-23584
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Pin Locations on Map allows Reflected XSS. This issue affects Pin Locations on Map: from n/a through 1.0.
published:2025-03-03T14:15:43.010


Instruction: Please provide detailed information about CVE-2025-23585

CVE:CVE-2025-23585
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CantonBolo Goo.gl Url Shorter allows Reflected XSS. This issue affects Goo.gl Url Shorter: from n/a through 1.0.1.
published:2025-03-03T14:15:43.153


Instruction: Please provide detailed information about CVE-2025-23586

CVE:CVE-2025-23586
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Post Category Notifications allows Reflected XSS. This issue affects WP Post Category Notifications: from n/a through 1.0.
published:2025-03-03T14:15:43.293


Instruction: Please provide detailed information about CVE-2025-23587

CVE:CVE-2025-23587
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound all-in-one-box-login allows Reflected XSS. This issue affects all-in-one-box-login: from n/a through 2.0.1.
published:2025-03-03T14:15:43.437


Instruction: Please provide detailed information about CVE-2025-23595

CVE:CVE-2025-23595
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Page Health-O-Meter allows Reflected XSS. This issue affects Page Health-O-Meter: from n/a through 2.0.
published:2025-03-03T14:15:43.580


Instruction: Please provide detailed information about CVE-2025-23600

CVE:CVE-2025-23600
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pinal.shah Send to a Friend Addon allows Reflected XSS. This issue affects Send to a Friend Addon: from n/a through 1.4.1.
published:2025-03-03T14:15:43.717


Instruction: Please provide detailed information about CVE-2025-23613

CVE:CVE-2025-23613
Description:Missing Authorization vulnerability in NotFound WP Journal allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Journal: from n/a through 1.1.
published:2025-03-03T14:15:43.860


Instruction: Please provide detailed information about CVE-2025-23615

CVE:CVE-2025-23615
Description:Missing Authorization vulnerability in NotFound Interactive Page Hierarchy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Interactive Page Hierarchy: from n/a through 1.0.1.
published:2025-03-03T14:15:43.997


Instruction: Please provide detailed information about CVE-2025-23616

CVE:CVE-2025-23616
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Canalplan allows Reflected XSS. This issue affects Canalplan: from n/a through 5.31.
published:2025-03-03T14:15:44.140


Instruction: Please provide detailed information about CVE-2025-23619

CVE:CVE-2025-23619
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Catch Duplicate Switcher allows Reflected XSS. This issue affects Catch Duplicate Switcher: from n/a through 2.0.
published:2025-03-03T14:15:44.280


Instruction: Please provide detailed information about CVE-2025-23635

CVE:CVE-2025-23635
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mobde3net ePermissions allows Reflected XSS. This issue affects ePermissions: from n/a through 1.2.
published:2025-03-03T14:15:44.413


Instruction: Please provide detailed information about CVE-2025-23637

CVE:CVE-2025-23637
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound 新淘客WordPress插件 allows Reflected XSS. This issue affects 新淘客WordPress插件: from n/a through 1.1.2.
published:2025-03-03T14:15:44.553


Instruction: Please provide detailed information about CVE-2025-23663

CVE:CVE-2025-23663
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Vaquez Contexto allows Reflected XSS. This issue affects Contexto: from n/a through 1.0.
published:2025-03-03T14:15:44.693


Instruction: Please provide detailed information about CVE-2025-23668

CVE:CVE-2025-23668
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound ChatGPT Open AI Images & Content for WooCommerce allows Reflected XSS. This issue affects ChatGPT Open AI Images & Content for WooCommerce: from n/a through 2.2.0.
published:2025-03-03T14:15:44.833


Instruction: Please provide detailed information about CVE-2025-23670

CVE:CVE-2025-23670
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound 4 author cheer up donate allows Reflected XSS. This issue affects 4 author cheer up donate: from n/a through 1.3.
published:2025-03-03T14:15:44.970


Instruction: Please provide detailed information about CVE-2025-23688

CVE:CVE-2025-23688
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Cobwebo URL Plugin allows Reflected XSS. This issue affects Cobwebo URL Plugin: from n/a through 1.0.
published:2025-03-03T14:15:45.110


Instruction: Please provide detailed information about CVE-2025-23716

CVE:CVE-2025-23716
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Login Watchdog allows Stored XSS. This issue affects Login Watchdog: from n/a through 1.0.4.
published:2025-03-03T14:15:45.270


Instruction: Please provide detailed information about CVE-2025-23718

CVE:CVE-2025-23718
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Mancx AskMe Widget allows Reflected XSS. This issue affects Mancx AskMe Widget: from n/a through 0.3.
published:2025-03-03T14:15:45.440


Instruction: Please provide detailed information about CVE-2025-23721

CVE:CVE-2025-23721
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Mobigate allows Reflected XSS. This issue affects Mobigate: from n/a through 1.0.3.
published:2025-03-03T14:15:45.580


Instruction: Please provide detailed information about CVE-2025-23726

CVE:CVE-2025-23726
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound ComparePress allows Reflected XSS. This issue affects ComparePress: from n/a through 2.0.8.
published:2025-03-03T14:15:45.723


Instruction: Please provide detailed information about CVE-2025-23731

CVE:CVE-2025-23731
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in infosoftplugin Tax Report for WooCommerce allows Reflected XSS. This issue affects Tax Report for WooCommerce: from n/a through 2.2.
published:2025-03-03T14:15:45.863


Instruction: Please provide detailed information about CVE-2025-23736

CVE:CVE-2025-23736
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Form To JSON allows Reflected XSS. This issue affects Form To JSON: from n/a through 1.0.
published:2025-03-03T14:15:46.003


Instruction: Please provide detailed information about CVE-2025-23738

CVE:CVE-2025-23738
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Ps Ads Pro allows Reflected XSS. This issue affects Ps Ads Pro: from n/a through 1.0.0.
published:2025-03-03T14:15:46.157


Instruction: Please provide detailed information about CVE-2025-23739

CVE:CVE-2025-23739
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Ultimate Reviews FREE allows Reflected XSS. This issue affects WP Ultimate Reviews FREE: from n/a through 1.0.2.
published:2025-03-03T14:15:46.300


Instruction: Please provide detailed information about CVE-2025-23740

CVE:CVE-2025-23740
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Easy School Registration allows Reflected XSS. This issue affects Easy School Registration: from n/a through 3.9.8.
published:2025-03-03T14:15:46.443


Instruction: Please provide detailed information about CVE-2025-23741

CVE:CVE-2025-23741
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Notifications Center allows Reflected XSS. This issue affects Notifications Center: from n/a through 1.5.2.
published:2025-03-03T14:15:46.580


Instruction: Please provide detailed information about CVE-2025-23753

CVE:CVE-2025-23753
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound DN Sitemap Control allows Reflected XSS. This issue affects DN Sitemap Control: from n/a through 1.0.6.
published:2025-03-03T14:15:46.720


Instruction: Please provide detailed information about CVE-2025-23762

CVE:CVE-2025-23762
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound DsgnWrks Twitter Importer allows Reflected XSS. This issue affects DsgnWrks Twitter Importer: from n/a through 1.1.4.
published:2025-03-03T14:15:46.860


Instruction: Please provide detailed information about CVE-2025-23763

CVE:CVE-2025-23763
Description:Missing Authorization vulnerability in Alex Volkov WAH Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WAH Forms: from n/a through 1.0.
published:2025-03-03T14:15:47.000


Instruction: Please provide detailed information about CVE-2025-23813

CVE:CVE-2025-23813
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Guten Free Options allows Reflected XSS. This issue affects Guten Free Options: from n/a through 0.9.5.
published:2025-03-03T14:15:47.140


Instruction: Please provide detailed information about CVE-2025-23814

CVE:CVE-2025-23814
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound CRUDLab Like Box allows Reflected XSS. This issue affects CRUDLab Like Box: from n/a through 2.0.9.
published:2025-03-03T14:15:47.280


Instruction: Please provide detailed information about CVE-2025-23829

CVE:CVE-2025-23829
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Woo Update Variations In Cart allows Stored XSS. This issue affects Woo Update Variations In Cart: from n/a through 0.0.9.
published:2025-03-03T14:15:47.417


Instruction: Please provide detailed information about CVE-2025-23843

CVE:CVE-2025-23843
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wphrmanager WP-HR Manager: The Human Resources Plugin for WordPress allows Reflected XSS. This issue affects WP-HR Manager: The Human Resources Plugin for WordPress: from n/a through 3.1.0.
published:2025-03-03T14:15:47.583


Instruction: Please provide detailed information about CVE-2025-23847

CVE:CVE-2025-23847
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Site Launcher allows Reflected XSS. This issue affects Site Launcher: from n/a through 0.9.4.
published:2025-03-03T14:15:47.730


Instruction: Please provide detailed information about CVE-2025-23850

CVE:CVE-2025-23850
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Mojo Under Construction allows Reflected XSS. This issue affects Mojo Under Construction: from n/a through 1.1.2.
published:2025-03-03T14:15:47.870


Instruction: Please provide detailed information about CVE-2025-23852

CVE:CVE-2025-23852
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound First Comment Redirect allows Reflected XSS. This issue affects First Comment Redirect: from n/a through 1.0.3.
published:2025-03-03T14:15:48.013


Instruction: Please provide detailed information about CVE-2025-23879

CVE:CVE-2025-23879
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PillarDev Easy Automatic Newsletter Lite allows Reflected XSS. This issue affects Easy Automatic Newsletter Lite: from n/a through 3.2.0.
published:2025-03-03T14:15:48.157


Instruction: Please provide detailed information about CVE-2025-23881

CVE:CVE-2025-23881
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound LJ Custom Menu Links allows Reflected XSS. This issue affects LJ Custom Menu Links: from n/a through 2.5.
published:2025-03-03T14:15:48.290


Instruction: Please provide detailed information about CVE-2025-23883

CVE:CVE-2025-23883
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Stray Random Quotes allows Reflected XSS. This issue affects Stray Random Quotes: from n/a through 1.9.9.
published:2025-03-03T14:15:48.430


Instruction: Please provide detailed information about CVE-2025-23903

CVE:CVE-2025-23903
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Local Shipping Labels for WooCommerce allows Reflected XSS. This issue affects Local Shipping Labels for WooCommerce: from n/a through 1.0.0.
published:2025-03-03T14:15:48.573


Instruction: Please provide detailed information about CVE-2025-23904

CVE:CVE-2025-23904
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Rebrand Fluent Forms allows Reflected XSS. This issue affects Rebrand Fluent Forms: from n/a through 1.0.
published:2025-03-03T14:15:48.720


Instruction: Please provide detailed information about CVE-2025-23945

CVE:CVE-2025-23945
Description:Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound Popliup allows PHP Local File Inclusion. This issue affects Popliup: from n/a through 1.1.1.
published:2025-03-03T14:15:48.863


Instruction: Please provide detailed information about CVE-2025-23956

CVE:CVE-2025-23956
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Easy Post Mailer allows Reflected XSS. This issue affects WP Easy Post Mailer: from n/a through 0.64.
published:2025-03-03T14:15:49.010


Instruction: Please provide detailed information about CVE-2025-24694

CVE:CVE-2025-24694
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM Email Registration Blacklist and Whitelist allows Reflected XSS. This issue affects CM Email Registration Blacklist and Whitelist: from n/a through 1.5.5.
published:2025-03-03T14:15:49.157


Instruction: Please provide detailed information about CVE-2025-24758

CVE:CVE-2025-24758
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM Map Locations allows Reflected XSS. This issue affects CM Map Locations: from n/a through 2.0.8.
published:2025-03-03T14:15:49.300


Instruction: Please provide detailed information about CVE-2025-25070

CVE:CVE-2025-25070
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Album Reviewer allows Stored XSS. This issue affects Album Reviewer: from n/a through 2.0.2.
published:2025-03-03T14:15:49.490


Instruction: Please provide detailed information about CVE-2025-25083

CVE:CVE-2025-25083
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound EP4 More Embeds allows Stored XSS. This issue affects EP4 More Embeds: from n/a through 1.0.0.
published:2025-03-03T14:15:49.633


Instruction: Please provide detailed information about CVE-2025-25084

CVE:CVE-2025-25084
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound UniTimetable allows Stored XSS. This issue affects UniTimetable: from n/a through 1.1.
published:2025-03-03T14:15:49.777


Instruction: Please provide detailed information about CVE-2025-25087

CVE:CVE-2025-25087
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound seekXL Snapr allows Reflected XSS. This issue affects seekXL Snapr: from n/a through 2.0.6.
published:2025-03-03T14:15:49.920


Instruction: Please provide detailed information about CVE-2025-25089

CVE:CVE-2025-25089
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in appten Image Rotator allows Reflected XSS. This issue affects Image Rotator: from n/a through 2.0.
published:2025-03-03T14:15:50.053


Instruction: Please provide detailed information about CVE-2025-25090

CVE:CVE-2025-25090
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Dreamstime Stock Photos allows Reflected XSS. This issue affects Dreamstime Stock Photos: from n/a through 4.0.
published:2025-03-03T14:15:50.197


Instruction: Please provide detailed information about CVE-2025-25092

CVE:CVE-2025-25092
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gtlwpdev All push notification for WP allows Reflected XSS. This issue affects All push notification for WP: from n/a through 1.5.3.
published:2025-03-03T14:15:50.343


Instruction: Please provide detailed information about CVE-2025-25099

CVE:CVE-2025-25099
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in accreteinfosolution Appointment Buddy Widget allows Reflected XSS. This issue affects Appointment Buddy Widget: from n/a through 1.2.
published:2025-03-03T14:15:50.490


Instruction: Please provide detailed information about CVE-2025-25102

CVE:CVE-2025-25102
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Yahoo BOSS allows Reflected XSS. This issue affects Yahoo BOSS: from n/a through 0.7.
published:2025-03-03T14:15:50.630


Instruction: Please provide detailed information about CVE-2025-25108

CVE:CVE-2025-25108
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shalomworld SW Plus allows Reflected XSS. This issue affects SW Plus: from n/a through 2.1.
published:2025-03-03T14:15:50.767


Instruction: Please provide detailed information about CVE-2025-25109

CVE:CVE-2025-25109
Description:Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound WP Vehicle Manager allows PHP Local File Inclusion. This issue affects WP Vehicle Manager: from n/a through 3.1.
published:2025-03-03T14:15:50.907


Instruction: Please provide detailed information about CVE-2025-25112

CVE:CVE-2025-25112
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Social Links allows Blind SQL Injection. This issue affects Social Links: from n/a through 1.2.
published:2025-03-03T14:15:51.050


Instruction: Please provide detailed information about CVE-2025-25113

CVE:CVE-2025-25113
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Implied Cookie Consent allows Reflected XSS. This issue affects Implied Cookie Consent: from n/a through 1.3.
published:2025-03-03T14:15:51.193


Instruction: Please provide detailed information about CVE-2025-25114

CVE:CVE-2025-25114
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ehabstar User Role allows Reflected XSS. This issue affects User Role: from n/a through 1.0.
published:2025-03-03T14:15:51.333


Instruction: Please provide detailed information about CVE-2025-25115

CVE:CVE-2025-25115
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Like dislike plus counter allows Stored XSS. This issue affects Like dislike plus counter: from n/a through 1.0.
published:2025-03-03T14:15:51.477


Instruction: Please provide detailed information about CVE-2025-25118

CVE:CVE-2025-25118
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Top Bar – PopUps – by WPOptin allows Reflected XSS. This issue affects Top Bar – PopUps – by WPOptin: from n/a through 2.0.8.
published:2025-03-03T14:15:51.610


Instruction: Please provide detailed information about CVE-2025-25119

CVE:CVE-2025-25119
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Woocommerce osCommerce Sync allows Reflected XSS. This issue affects Woocommerce osCommerce Sync: from n/a through 2.0.20.
published:2025-03-03T14:15:51.750


Instruction: Please provide detailed information about CVE-2025-25121

CVE:CVE-2025-25121
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Theme Options Z allows Stored XSS. This issue affects Theme Options Z: from n/a through 1.4.
published:2025-03-03T14:15:51.887


Instruction: Please provide detailed information about CVE-2025-25122

CVE:CVE-2025-25122
Description:Path Traversal vulnerability in NotFound WizShop allows PHP Local File Inclusion. This issue affects WizShop: from n/a through 3.0.2.
published:2025-03-03T14:15:52.033


Instruction: Please provide detailed information about CVE-2025-25124

CVE:CVE-2025-25124
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devu Status Updater allows Reflected XSS. This issue affects Status Updater: from n/a through 1.9.2.
published:2025-03-03T14:15:52.183


Instruction: Please provide detailed information about CVE-2025-25127

CVE:CVE-2025-25127
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rohitashv Singhal Contact Us By Lord Linus allows Reflected XSS. This issue affects Contact Us By Lord Linus: from n/a through 2.6.
published:2025-03-03T14:15:52.320


Instruction: Please provide detailed information about CVE-2025-25129

CVE:CVE-2025-25129
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Callback Request allows Reflected XSS. This issue affects Callback Request: from n/a through 1.4.
published:2025-03-03T14:15:52.460


Instruction: Please provide detailed information about CVE-2025-25130

CVE:CVE-2025-25130
Description:Relative Path Traversal vulnerability in NotFound Delete Comments By Status allows PHP Local File Inclusion. This issue affects Delete Comments By Status: from n/a through 2.1.1.
published:2025-03-03T14:15:52.613


Instruction: Please provide detailed information about CVE-2025-25131

CVE:CVE-2025-25131
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound RJ Quickcharts allows Stored XSS. This issue affects RJ Quickcharts: from n/a through 0.6.1.
published:2025-03-03T14:15:52.777


Instruction: Please provide detailed information about CVE-2025-25132

CVE:CVE-2025-25132
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ravi Singh Visitor Details allows Stored XSS. This issue affects Visitor Details: from n/a through 1.0.1.
published:2025-03-03T14:15:52.917


Instruction: Please provide detailed information about CVE-2025-25133

CVE:CVE-2025-25133
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Frontend Submit allows Cross-Site Scripting (XSS). This issue affects WP Frontend Submit: from n/a through 1.1.0.
published:2025-03-03T14:15:53.060


Instruction: Please provide detailed information about CVE-2025-25137

CVE:CVE-2025-25137
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Social Links allows Stored XSS. This issue affects Social Links: from n/a through 1.0.11.
published:2025-03-03T14:15:53.200


Instruction: Please provide detailed information about CVE-2025-25142

CVE:CVE-2025-25142
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Less Compiler allows Stored XSS. This issue affects WP Less Compiler: from n/a through 1.3.0.
published:2025-03-03T14:15:53.337


Instruction: Please provide detailed information about CVE-2025-25150

CVE:CVE-2025-25150
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix uListing allows Blind SQL Injection. This issue affects uListing: from n/a through 2.1.6.
published:2025-03-03T14:15:53.477


Instruction: Please provide detailed information about CVE-2025-25157

CVE:CVE-2025-25157
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Church Center allows Reflected XSS. This issue affects WP Church Center: from n/a through 1.3.3.
published:2025-03-03T14:15:53.617


Instruction: Please provide detailed information about CVE-2025-25158

CVE:CVE-2025-25158
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Uncomplicated SEO allows Reflected XSS. This issue affects Uncomplicated SEO: from n/a through 1.2.
published:2025-03-03T14:15:53.760


Instruction: Please provide detailed information about CVE-2025-25161

CVE:CVE-2025-25161
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Find Your Nearest allows Reflected XSS. This issue affects WP Find Your Nearest: from n/a through 0.3.1.
published:2025-03-03T14:15:53.900


Instruction: Please provide detailed information about CVE-2025-25162

CVE:CVE-2025-25162
Description:Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NotFound Sports Rankings and Lists allows Absolute Path Traversal. This issue affects Sports Rankings and Lists: from n/a through 1.0.2.
published:2025-03-03T14:15:54.040


Instruction: Please provide detailed information about CVE-2025-25164

CVE:CVE-2025-25164
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Meta Accelerator allows Reflected XSS. This issue affects Meta Accelerator: from n/a through 1.0.4.
published:2025-03-03T14:15:54.190


Instruction: Please provide detailed information about CVE-2025-25165

CVE:CVE-2025-25165
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Staff Directory Plugin: Company Directory allows Stored XSS. This issue affects Staff Directory Plugin: Company Directory: from n/a through 4.3.
published:2025-03-03T14:15:54.330


Instruction: Please provide detailed information about CVE-2025-25169

CVE:CVE-2025-25169
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Authors Autocomplete Meta Box allows Reflected XSS. This issue affects Authors Autocomplete Meta Box: from n/a through 1.2.
published:2025-03-03T14:15:54.477


Instruction: Please provide detailed information about CVE-2025-25170

CVE:CVE-2025-25170
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Migrate Posts allows Reflected XSS. This issue affects Migrate Posts: from n/a through 1.0.
published:2025-03-03T14:15:54.613


Instruction: Please provide detailed information about CVE-2025-26534

CVE:CVE-2025-26534
Description:Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NotFound Helloprint allows Path Traversal. This issue affects Helloprint: from n/a through 2.0.7.
published:2025-03-03T14:15:54.757


Instruction: Please provide detailed information about CVE-2025-26535

CVE:CVE-2025-26535
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Bitcoin / AltCoin Payment Gateway for WooCommerce allows Blind SQL Injection. This issue affects Bitcoin / AltCoin Payment Gateway for WooCommerce: from n/a through 1.7.6.
published:2025-03-03T14:15:54.900


Instruction: Please provide detailed information about CVE-2025-26540

CVE:CVE-2025-26540
Description:Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NotFound Helloprint allows Path Traversal. This issue affects Helloprint: from n/a through 2.0.7.
published:2025-03-03T14:15:55.037


Instruction: Please provide detailed information about CVE-2025-26557

CVE:CVE-2025-26557
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound ViperBar allows Reflected XSS. This issue affects ViperBar: from n/a through 2.0.
published:2025-03-03T14:15:55.173


Instruction: Please provide detailed information about CVE-2025-26563

CVE:CVE-2025-26563
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Mobile allows Reflected XSS. This issue affects Mobile: from n/a through 1.3.3.
published:2025-03-03T14:15:55.310


Instruction: Please provide detailed information about CVE-2025-26585

CVE:CVE-2025-26585
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound DL Leadback allows Reflected XSS. This issue affects DL Leadback: from n/a through 1.2.1.
published:2025-03-03T14:15:55.470


Instruction: Please provide detailed information about CVE-2025-26586

CVE:CVE-2025-26586
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Events Planner allows Reflected XSS. This issue affects Events Planner: from n/a through 1.3.10.
published:2025-03-03T14:15:55.640


Instruction: Please provide detailed information about CVE-2025-26587

CVE:CVE-2025-26587
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound sidebarTabs allows Reflected XSS. This issue affects sidebarTabs: from n/a through 3.1.
published:2025-03-03T14:15:55.780


Instruction: Please provide detailed information about CVE-2025-26588

CVE:CVE-2025-26588
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound TTT Crop allows Reflected XSS. This issue affects TTT Crop: from n/a through 1.0.
published:2025-03-03T14:15:55.920


Instruction: Please provide detailed information about CVE-2025-26589

CVE:CVE-2025-26589
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound IE CSS3 Support allows Reflected XSS. This issue affects IE CSS3 Support: from n/a through 2.0.1.
published:2025-03-03T14:15:56.067


Instruction: Please provide detailed information about CVE-2025-26879

CVE:CVE-2025-26879
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cristián Lávaque s2Member Pro allows Reflected XSS. This issue affects s2Member Pro: from n/a through 241216.
published:2025-03-03T14:15:56.213


Instruction: Please provide detailed information about CVE-2025-26885

CVE:CVE-2025-26885
Description:Deserialization of Untrusted Data vulnerability in Brent Jett Assistant allows Object Injection. This issue affects Assistant: from n/a through 1.5.1.
published:2025-03-03T14:15:56.360


Instruction: Please provide detailed information about CVE-2025-26914

CVE:CVE-2025-26914
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bowo Variable Inspector allows Reflected XSS. This issue affects Variable Inspector: from n/a through 2.6.2.
published:2025-03-03T14:15:56.500


Instruction: Please provide detailed information about CVE-2025-26917

CVE:CVE-2025-26917
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes WP Templata allows Reflected XSS. This issue affects WP Templata: from n/a through 1.0.7.
published:2025-03-03T14:15:56.640


Instruction: Please provide detailed information about CVE-2025-26918

CVE:CVE-2025-26918
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology Small Package Quotes – Unishippers Edition allows Reflected XSS. This issue affects Small Package Quotes – Unishippers Edition: from n/a through 2.4.9.
published:2025-03-03T14:15:56.787


Instruction: Please provide detailed information about CVE-2025-26967

CVE:CVE-2025-26967
Description:Deserialization of Untrusted Data vulnerability in Stiofan Events Calendar for GeoDirectory allows Object Injection. This issue affects Events Calendar for GeoDirectory: from n/a through 2.3.14.
published:2025-03-03T14:15:56.927


Instruction: Please provide detailed information about CVE-2025-26970

CVE:CVE-2025-26970
Description:Improper Control of Generation of Code ('Code Injection') vulnerability in NotFound Ark Theme Core allows Code Injection. This issue affects Ark Theme Core: from n/a through 1.70.0.
published:2025-03-03T14:15:57.077


Instruction: Please provide detailed information about CVE-2025-26984

CVE:CVE-2025-26984
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozy Vision SMS Alert Order Notifications – WooCommerce allows Reflected XSS. This issue affects SMS Alert Order Notifications – WooCommerce: from n/a through 3.7.8.
published:2025-03-03T14:15:57.217


Instruction: Please provide detailed information about CVE-2025-26988

CVE:CVE-2025-26988
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision SMS Alert Order Notifications – WooCommerce allows SQL Injection. This issue affects SMS Alert Order Notifications – WooCommerce: from n/a through 3.7.8.
published:2025-03-03T14:15:57.370


Instruction: Please provide detailed information about CVE-2025-26989

CVE:CVE-2025-26989
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in softdiscover Zigaform – Form Builder Lite allows Stored XSS. This issue affects Zigaform – Form Builder Lite: from n/a through 7.4.2.
published:2025-03-03T14:15:57.520


Instruction: Please provide detailed information about CVE-2025-26994

CVE:CVE-2025-26994
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in softdiscover Zigaform – Price Calculator & Cost Estimation Form Builder Lite allows Stored XSS. This issue affects Zigaform – Price Calculator & Cost Estimation Form Builder Lite: from n/a through 7.4.2.
published:2025-03-03T14:15:57.667


Instruction: Please provide detailed information about CVE-2025-26999

CVE:CVE-2025-26999
Description:Deserialization of Untrusted Data vulnerability in Metagauss ProfileGrid  allows Object Injection. This issue affects ProfileGrid : from n/a through 5.9.4.3.
published:2025-03-03T14:15:57.830


Instruction: Please provide detailed information about CVE-2025-27263

CVE:CVE-2025-27263
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Doctor Appointment Booking allows SQL Injection. This issue affects Doctor Appointment Booking: from n/a through 1.0.0.
published:2025-03-03T14:15:57.980


Instruction: Please provide detailed information about CVE-2025-27264

CVE:CVE-2025-27264
Description:Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound Doctor Appointment Booking allows PHP Local File Inclusion. This issue affects Doctor Appointment Booking: from n/a through 1.0.0.
published:2025-03-03T14:15:58.123


Instruction: Please provide detailed information about CVE-2025-27268

CVE:CVE-2025-27268
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition allows SQL Injection. This issue affects Small Package Quotes – Worldwide Express Edition: from n/a through 5.2.18.
published:2025-03-03T14:15:58.260


Instruction: Please provide detailed information about CVE-2025-27269

CVE:CVE-2025-27269
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound .htaccess Login block allows Reflected XSS. This issue affects .htaccess Login block: from n/a through 0.9a.
published:2025-03-03T14:15:58.403


Instruction: Please provide detailed information about CVE-2025-27270

CVE:CVE-2025-27270
Description:Missing Authorization vulnerability in NotFound Residential Address Detection allows Privilege Escalation. This issue affects Residential Address Detection: from n/a through 2.5.4.
published:2025-03-03T14:15:58.540


Instruction: Please provide detailed information about CVE-2025-27271

CVE:CVE-2025-27271
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound DB Tables Import/Export allows Reflected XSS. This issue affects DB Tables Import/Export: from n/a through 1.0.1.
published:2025-03-03T14:15:58.677


Instruction: Please provide detailed information about CVE-2025-27273

CVE:CVE-2025-27273
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in winking Affiliate Links Manager allows Reflected XSS. This issue affects Affiliate Links Manager: from n/a through 1.0.
published:2025-03-03T14:15:58.817


Instruction: Please provide detailed information about CVE-2025-27274

CVE:CVE-2025-27274
Description:Path Traversal vulnerability in NotFound GPX Viewer allows Path Traversal. This issue affects GPX Viewer: from n/a through 2.2.11.
published:2025-03-03T14:15:58.960


Instruction: Please provide detailed information about CVE-2025-27275

CVE:CVE-2025-27275
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andrew_fisher WOO Codice Fiscale allows Reflected XSS. This issue affects WOO Codice Fiscale: from n/a through 1.6.3.
published:2025-03-03T14:15:59.097


Instruction: Please provide detailed information about CVE-2025-27278

CVE:CVE-2025-27278
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound AcuGIS Leaflet Maps allows Reflected XSS. This issue affects AcuGIS Leaflet Maps: from n/a through 5.1.1.0.
published:2025-03-03T14:15:59.237


Instruction: Please provide detailed information about CVE-2025-27279

CVE:CVE-2025-27279
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Flashfader allows Reflected XSS. This issue affects Flashfader: from n/a through 1.1.1.
published:2025-03-03T14:15:59.373


Instruction: Please provide detailed information about CVE-2025-0689

CVE:CVE-2025-0689
Description:When reading data from disk, the grub's UDF filesystem module utilizes the user controlled data length metadata to allocate its internal buffers. In certain scenarios, while iterating through disk sectors, it assumes the read size from the disk is always smaller than the allocated buffer size which is not guaranteed. A crafted filesystem image may lead to a heap-based buffer overflow resulting in critical data to be corrupted, resulting in the risk of arbitrary code execution by-passing secure boot protections.
published:2025-03-03T15:15:16.147


Instruction: Please provide detailed information about CVE-2025-1125

CVE:CVE-2025-1125
Description:When reading data from a hfs filesystem, grub's hfs filesystem module uses user-controlled parameters from the filesystem metadata to calculate the internal buffers size, however it misses to properly check for integer overflows. A maliciouly crafted filesystem may lead some of those buffer size calculation to overflow, causing it to perform a grub_malloc() operation with a smaller size than expected. As a result the hfsplus_open_compressed_real() function will write past of the internal buffer length. This flaw may be leveraged to corrupt grub's internal critical data and may result in arbitrary code execution by-passing secure boot protections.
published:2025-03-03T15:15:16.300


Instruction: Please provide detailed information about CVE-2025-1801

CVE:CVE-2025-1801
Description:A flaw was found in the Ansible aap-gateway. Concurrent requests handled by the gateway grpc service can result in concurrency issues due to race condition requests against the proxy. This issue potentially allows a less privileged user to obtain the JWT of a greater privileged user, enabling the server to be jeopardized. A user session or confidential data might be vulnerable.
published:2025-03-03T15:15:16.500


Instruction: Please provide detailed information about CVE-2025-0555

CVE:CVE-2025-0555
Description:A Cross Site Scripting (XSS) vulnerability in GitLab-EE affecting all versions from 16.6 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows an attacker to bypass security controls and execute arbitrary scripts in a users browser under specific conditions.
published:2025-03-03T16:15:39.227


Instruction: Please provide detailed information about CVE-2025-24023

CVE:CVE-2025-24023
Description:Flask-AppBuilder is an application development framework. Prior to 4.5.3, Flask-AppBuilder allows unauthenticated users to enumerate existing usernames by timing the response time from the server when brute forcing requests to login. This vulnerability is fixed in 4.5.3.
published:2025-03-03T16:15:41.820


Instruction: Please provide detailed information about CVE-2025-25185

CVE:CVE-2025-25185
Description:GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for soft links. An attacker can create a malicious file as a soft link pointing to a target file, then package this soft link file into a tar.gz file and upload it. Subsequently, when accessing the decompressed file from the server, the soft link will point to the target file on the victim server. The vulnerability allows attackers to read all files on the server.
published:2025-03-03T16:15:42.377


Instruction: Please provide detailed information about CVE-2025-27094

CVE:CVE-2025-27094
Description:Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field configurations, leading to potential information loss. The display time attribute for the date field, the size attribute for the multiselectbox field, the default value, number of rows, and columns attributes for the text field, and the default value, size, and max characters attributes for the string field configurations are lost when added as criteria in a saved report. Additionally, in Tuleap Community Edition versions 16.4.99.1739806825 to 16.4.99.1739877910, this issue could be exploited to prevent access to tracker data by triggering a crash. This vulnerability has been fixed in Tuleap Community Edition 16.4.99.1739877910 and Tuleap Enterprise Edition 16.3-9 and 16.4-4.
published:2025-03-03T16:15:43.023


Instruction: Please provide detailed information about CVE-2025-27099

CVE:CVE-2025-27099
Description:Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-site scripting (XSS) via the tracker names used in the semantic timeframe deletion message. A tracker administrator with a semantic timeframe used by other trackers could use this vulnerability to force other tracker administrators to execute uncontrolled code. This vulnerability is fixed in Tuleap Community Edition 16.4.99.1740067916 and Tuleap Enterprise Edition 16.4-5 and 16.3-10.
published:2025-03-03T16:15:43.173


Instruction: Please provide detailed information about CVE-2025-27417

CVE:CVE-2025-27417
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the adicionar_status_atendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the status parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 3.2.16.
published:2025-03-03T16:15:43.820


Instruction: Please provide detailed information about CVE-2025-27418

CVE:CVE-2025-27418
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the adicionar_tipo_atendido.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the tipo parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability is fixed in 3.2.16.
published:2025-03-03T16:15:43.960


Instruction: Please provide detailed information about CVE-2025-27419

CVE:CVE-2025-27419
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Denial of Service (DoS) vulnerability exists in WeGIA. This vulnerability allows any unauthenticated user to cause the server to become unresponsive by performing aggressive spidering. The vulnerability is caused by recursive crawling of dynamically generated URLs and insufficient handling of large volumes of requests. This vulnerability is fixed in 3.2.16.
published:2025-03-03T16:15:44.090


Instruction: Please provide detailed information about CVE-2025-27420

CVE:CVE-2025-27420
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the atendido_parentesco_adicionar.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the descricao parameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk. This vulnerability fix in 3.2.16.
published:2025-03-03T16:15:44.223


Instruction: Please provide detailed information about CVE-2025-0285

CVE:CVE-2025-0285
Description:Paragon Partition Manager version 17.9.1 contains an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits.
published:2025-03-03T17:15:13.430


Instruction: Please provide detailed information about CVE-2025-0286

CVE:CVE-2025-0286
Description:Paragon Partition Manager version 17.9.1 contains an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine.
published:2025-03-03T17:15:13.537


Instruction: Please provide detailed information about CVE-2025-0287

CVE:CVE-2025-0287
Description:Paragon Partition Manager version 17.9.1 contains a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation.
published:2025-03-03T17:15:13.710


Instruction: Please provide detailed information about CVE-2025-0288

CVE:CVE-2025-0288
Description:Paragon Partition Manager version 17.9.1 contains an arbitrary kernel memory vulnerability facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalation.
published:2025-03-03T17:15:13.823


Instruction: Please provide detailed information about CVE-2025-0289

CVE:CVE-2025-0289
Description:Paragon Partition Manager version 17.9.1, both community and Business versions, contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.
published:2025-03-03T17:15:13.943


Instruction: Please provide detailed information about CVE-2025-0678

CVE:CVE-2025-0678
Description:A flaw was found in grub2. When reading data from a squash4 filesystem, grub's squash4 fs module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted filesystem may lead some of those buffer size calculations to overflow, causing it to perform a grub_malloc() operation with a smaller size than expected. As a result, the direct_read() will perform a heap based out-of-bounds write during data reading. This flaw may be leveraged to corrupt grub's internal critical data and may result in arbitrary code execution, by-passing secure boot protections.
published:2025-03-03T17:15:14.053


Instruction: Please provide detailed information about CVE-2025-1876

CVE:CVE-2025-1876
Description:A vulnerability, which was classified as critical, has been found in D-Link DAP-1562 1.10. Affected by this issue is the function http_request_parse of the component HTTP Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
published:2025-03-03T17:15:14.517


Instruction: Please provide detailed information about CVE-2025-25301

CVE:CVE-2025-25301
Description:Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker may be able to query this endpoint to view pictures hosted on the internal network of the rembg server. This issue may lead to Information Disclosure.
published:2025-03-03T17:15:14.740


Instruction: Please provide detailed information about CVE-2025-25302

CVE:CVE-2025-25302
Description:Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the CORS middleware is setup incorrectly. All origins are reflected, which allows any website to send cross site requests to the rembg server and thus query any API. Even if authentication were to be enabled, allow_credentials is set to True, which would allow any website to send authenticated cross site requests.
published:2025-03-03T17:15:14.920


Instruction: Please provide detailed information about CVE-2025-25303

CVE:CVE-2025-25303
Description:The MouseTooltipTranslator Chrome extension allows mouseover translation of any language at once. The MouseTooltipTranslator browser extension is vulnerable to SSRF attacks. The pdf.mjs script uses the URL parameter from the current URL as the file to download and display to the extension user. Because pdf.mjs is imported in viewer.html and viewer.html is accessible to all URLs, an attacker can force the user’s browser to make a request to any arbitrary URL. After discussion with maintainer, patching this issue would require disabling a major feature of the extension in exchange for a low severity vulnerability. Decision to not patch issue.
published:2025-03-03T17:15:15.073


Instruction: Please provide detailed information about CVE-2025-27421

CVE:CVE-2025-27421
Description:Abacus is a highly scalable and stateless counting API. A critical goroutine leak vulnerability has been identified in the Abacus server's Server-Sent Events (SSE) implementation. The issue occurs when clients disconnect from the /stream endpoint, as the server fails to properly clean up resources and terminate associated goroutines. This leads to resource exhaustion where the server continues running but eventually stops accepting new SSE connections while maintaining high memory usage. The vulnerability specifically involves improper channel cleanup in the event handling mechanism, causing goroutines to remain blocked indefinitely. This vulnerability is fixed in 1.4.0.
published:2025-03-03T17:15:15.630


Instruction: Please provide detailed information about CVE-2025-27422

CVE:CVE-2025-27422
Description:FACTION is a PenTesting Report Generation and Collaboration Framework. Authentication is bypassed when an attacker registers a new user with admin privileges. This is possible at any time without any authorization. The request must follow the validation rules (no missing information, secure password, etc) but there are no other controls stopping them. This vulnerability is fixed in 1.4.3.
published:2025-03-03T17:15:15.787


Instruction: Please provide detailed information about CVE-2025-27423

CVE:CVE-2025-27423
Description:Vim is an open source, command line text editor. Vim is distributed with the tar.vim plugin, that allows easy editing and viewing of (compressed or uncompressed) tar files. Starting with 9.1.0858, the tar.vim plugin uses the ":read" ex command line to append below the cursor position, however the is not sanitized and is taken literally from the tar archive. This allows to execute shell commands via special crafted tar archives. Whether this really happens, depends on the shell being used ('shell' option, which is set using $SHELL). The issue has been fixed as of Vim patch v9.1.1164
published:2025-03-03T17:15:15.943


Instruction: Please provide detailed information about CVE-2025-27498

CVE:CVE-2025-27498
Description:aes-gcm is a pure Rust implementation of the AES-GCM. In decrypt_in_place_detached, the decrypted ciphertext (which is the correct ciphertext) is exposed even if the tag is incorrect. This is because in decrypt_inplace in asconcore.rs, tag verification causes an error to be returned with the plaintext contents still in buffer. The vulnerability is fixed in 0.4.3.
published:2025-03-03T17:15:16.443


Instruction: Please provide detailed information about CVE-2025-0684

CVE:CVE-2025-0684
Description:A flaw was found in grub2. When performing a symlink lookup from a reiserfs filesystem, grub's reiserfs fs module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciouly crafted filesystem may lead some of those buffer size calculations to overflow, causing it to perform a grub_malloc() operation with a smaller size than expected. As a result, the grub_reiserfs_read_symlink() will call grub_reiserfs_read_real() with a overflown length parameter, leading to a heap based out-of-bounds write during data reading. This flaw may be leveraged to corrupt grub's internal critical data and can result in arbitrary code execution, by-passing secure boot protections.
published:2025-03-03T18:15:30.537