CVE Alert: CVE-2025-23111
Vulnerability Summary: CVE-2025-23111 An issue was discovered in REDCap 14.9.6. It allows HTML Injection via the Survey field name, exposing...
Vulnerability Summary: CVE-2025-23111 An issue was discovered in REDCap 14.9.6. It allows HTML Injection via the Survey field name, exposing...
Vulnerability Summary: CVE-2025-23113 An issue was discovered in REDCap 14.9.6. It has an action=myprojects&logout=1 CSRF issue in the alert-title while...
Vulnerability Summary: CVE-2025-22807 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robert Peake Responsive Flickr Slideshow...
Vulnerability Summary: CVE-2025-22818 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in S3Bubble S3Player – WooCommerce &...
Vulnerability Summary: CVE-2025-22806 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Modernaweb Studio Black Widgets For...
Vulnerability Summary: CVE-2025-22808 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Surbma Surbma | Premium WP...
Vulnerability Summary: CVE-2025-22817 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Venutius BP Profile Shortcodes Extra...
Vulnerability Summary: CVE-2025-22814 Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Admin Theme allows Cross Site Request Forgery.This issue...
Vulnerability Summary: CVE-2025-22813 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ChatBot for WordPress - WPBot...
Vulnerability Summary: CVE-2025-22824 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lucia Intelisano Live Flight Radar...
Vulnerability Summary: CVE-2025-22815 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins LLC Button Block allows...
Vulnerability Summary: CVE-2025-22812 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FlickDevs News Ticker Widget for...
Vulnerability Summary: CVE-2025-22823 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Twerdy Genesis Style Shortcodes...
Vulnerability Summary: CVE-2025-22822 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bishawjit Das wp custom countdown...
Vulnerability Summary: CVE-2025-22819 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 4wpbari Qr Code and Barcode...
Vulnerability Summary: CVE-2025-22821 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vfthemes StorePress allows DOM-Based XSS.This...
Vulnerability Summary: CVE-2025-22820 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daniel Walmsley VR Views allows...
Vulnerability Summary: CVE-2025-22826 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpecommerce, wp.insider Sell Digital Downloads...
Vulnerability Summary: CVE-2025-21596 An Improper Handling of Exceptional Conditions vulnerability in the command-line processing of Juniper Networks Junos OS on...
Vulnerability Summary: CVE-2025-22827 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joomag. WP Joomag allows DOM-Based...
Vulnerability Summary: CVE-2025-21599 A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Tunnel Driver (jtd) of Juniper...
Vulnerability Summary: CVE-2025-21600 An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos...
Vulnerability Summary: CVE-2025-21628 Chatwoot is a customer engagement suite. Prior to 3.16.0, conversation and contact filters endpoints did not sanitize...
Vulnerability Summary: CVE-2025-21592 An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the command-line interface (CLI) of Juniper...