Vulnerabilities > Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

DATE CVE VULNERABILITY TITLE RISK
2025-04-22 CVE-2025-46227 Cross-site Scripting vulnerability in Brechtvds Custom Related Posts
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brecht Custom Related Posts allows Stored XSS.
network
low complexity
brechtvds CWE-79
5.4
2025-04-22 CVE-2025-46228 Cross-site Scripting vulnerability in Avecnous Event Post
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post allows DOM-Based XSS.
network
low complexity
avecnous CWE-79
5.4
2025-04-22 CVE-2025-46229 Cross-site Scripting vulnerability in Textmetrics
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Israpil Textmetrics allows Stored XSS.
network
low complexity
textmetrics CWE-79
4.8
2025-04-22 CVE-2025-46233 Cross-site Scripting vulnerability in Sirv
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sirv CDN and Image Hosting Sirv allows Stored XSS.
network
low complexity
sirv CWE-79
5.4
2025-04-22 CVE-2025-46235 Cross-site Scripting vulnerability in Sktthemes SKT Blocks
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks – Gutenberg based Page Builder allows Stored XSS.
network
low complexity
sktthemes CWE-79
5.4
2025-04-22 CVE-2025-46236 Cross-site Scripting vulnerability in Ibericode Html Forms
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Software LLC HTML Forms allows Stored XSS.
network
low complexity
ibericode CWE-79
5.4
2025-04-22 CVE-2025-46237 Cross-site Scripting vulnerability in Ylefebvre Link Library
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Stored XSS.
network
low complexity
ylefebvre CWE-79
5.4
2025-04-22 CVE-2025-46238 Cross-site Scripting vulnerability in Rolandbaer List Last Changes
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rbaer List Last Changes allows Stored XSS.
network
low complexity
rolandbaer CWE-79
5.4
2025-04-22 CVE-2025-46239 Cross-site Scripting vulnerability in Plugin-Planet Theme Switcha
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Theme Switcha allows Stored XSS.
network
low complexity
plugin-planet CWE-79
5.4
2025-04-22 CVE-2025-46240 Cross-site Scripting vulnerability in Plugin-Planet Simple Download Counter
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Simple Download Counter allows Stored XSS.
network
low complexity
plugin-planet CWE-79
5.4