5.1

CVSS4.0

CVE-2025-15175 - SohuTV CacheCloud AppController.java appCommandAnalysis cross site scripting

A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. Affected by this issue is the function doAppList/appCommandAnalysis of the file src/main/java/com/sohu/cache/web/controller/AppController.java. Performing manipulation results in cross site scripting. It is possible to initiate the atta…

πŸ“… Published: Dec. 29, 2025, 6:02 a.m. πŸ”„ Last Modified: Jan. 7, 2026, 1:25 p.m.

5.9

CVSS3.1

CVE-2025-13958 - YaMaps < 0.6.40 - Contributor+ Stored XSS

The YaMaps for WordPress Plugin WordPress plugin before 0.6.40 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting at…

πŸ“… Published: Dec. 29, 2025, 6 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

8.6

CVSS3.1

CVE-2025-13417 - Plugin Organizer < 10.2.4 - Subscriber+ SQLi

The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks.

πŸ“… Published: Dec. 29, 2025, 6 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

5.1

CVSS4.0

CVE-2025-15174 - SohuTV CacheCloud AppManageController.java doAppAuditList cross site scripting

A security vulnerability has been detected in SohuTV CacheCloud up to 3.2.0. Affected by this vulnerability is the function doAppAuditList of the file src/main/java/com/sohu/cache/web/controller/AppManageController.java. Such manipulation leads to cross site scripting. The attack may be performed f…

πŸ“… Published: Dec. 29, 2025, 5:32 a.m. πŸ”„ Last Modified: Jan. 7, 2026, 1:25 p.m.

6.8

CVSS4.0

CVE-2025-15070 - Data Exposure in Gmission Web FAX

Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse.This issue affects Web Fax: from 3.0 before 3.0.1

πŸ“… Published: Dec. 29, 2025, 5:06 a.m. πŸ”„ Last Modified: Jan. 13, 2026, 5:16 a.m.

8.4

CVSS4.0

CVE-2025-15069 - Privilege Escalation in Gmission Web FAX

Improper Authentication vulnerability in Gmission Web Fax allows Privilege Escalation.This issue affects Web Fax: from 3.0 before 3.0.1

πŸ“… Published: Dec. 29, 2025, 5:05 a.m. πŸ”„ Last Modified: Jan. 13, 2026, 5:16 a.m.

8.5

CVSS4.0

CVE-2025-15068 - Account Takeover in Gmission Web FAX

Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse, Session Credential Falsification through Manipulation.This issue affects Web Fax: from 3.0 before 3.0.1

πŸ“… Published: Dec. 29, 2025, 5:05 a.m. πŸ”„ Last Modified: Jan. 13, 2026, 5:16 a.m.

5.1

CVSS4.0

CVE-2025-15173 - SohuTV CacheCloud InstanceController.java advancedAnalysis cross site scripting

A weakness has been identified in SohuTV CacheCloud up to 3.2.0. Affected is the function advancedAnalysis of the file src/main/java/com/sohu/cache/web/controller/InstanceController.java. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit h…

πŸ“… Published: Dec. 29, 2025, 5:02 a.m. πŸ”„ Last Modified: Jan. 7, 2026, 1:26 p.m.

5.1

CVSS4.0

CVE-2025-15172 - SohuTV CacheCloud RedisConfigTemplateController.java preview cross site scripting

A security flaw has been discovered in SohuTV CacheCloud up to 3.2.0. This impacts the function preview of the file src/main/java/com/sohu/cache/web/controller/RedisConfigTemplateController.java. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit has …

πŸ“… Published: Dec. 29, 2025, 4:32 a.m. πŸ”„ Last Modified: Jan. 7, 2026, 1:27 p.m.

5.1

CVSS4.0

CVE-2025-15171 - SohuTV CacheCloud ServerController.java index cross site scripting

A vulnerability was identified in SohuTV CacheCloud up to 3.2.0. This affects the function index of the file src/main/java/com/sohu/cache/web/controller/ServerController.java. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly avai…

πŸ“… Published: Dec. 29, 2025, 4:02 a.m. πŸ”„ Last Modified: Jan. 7, 2026, 1:28 p.m.
Total resulsts: 346616
Page 2132 of 34,662
Β« previous page Β» next page
Filters