Riasztások
23 Jul 2025
NA - CVE-2025-54295 - A Reflected XSS vulnerability in DJ-Reviews...
A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered.
23 Jul 2025
NA - CVE-2025-54296 - A stored XSS vulnerability in ProFiles...
A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered.
23 Jul 2025
NA - CVE-2025-54297 - A stored XSS vulnerability in CComment...
A stored XSS vulnerability in CComment component 5.0.0-6.1.14 for Joomla was discovered.
23 Jul 2025
Medium - CVE-2025-4411 - Improper Neutralization of Input During Web...
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dataprom Informatics PACS-ACSS allows Cross-Site Scripting (XSS).This issue...
22 Jul 2025
NA - CVE-2025-52580 - Insertion of sensitive information into log...
Insertion of sensitive information into log file issue exists in "region PAY" App for Android prior to 1.5.28. If exploited, sensitive user information may be exposed to an attacker who has access...
22 Jul 2025
High - CVE-2025-6585 - The WP JobHunt plugin for WordPress is...
The WP JobHunt plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.2 via the cs_remove_profile_callback() function due to missing...
22 Jul 2025
Medium - CVE-2025-7495 - The WP-Members Membership Plugin plugin for...
The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpmem_login_link' shortcode in all versions up to, and including,...
22 Jul 2025
Medium - CVE-2025-7644 - The Pixel Gallery Addons for Elementor – Easy...
The Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...