4.8

CVSS4.0

CVE-2025-8550 - atjiu pybbs list cross site scripting

A vulnerability was found in atjiu pybbs up to 6.0.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/topic/list. The manipulation of the argument Username leads to cross site scripting. The attack can be launched remotely. The expl…

📅 Published: Aug. 5, 2025, 7:02 a.m. 🔄 Last Modified: Sept. 4, 2025, 3:37 p.m.

6.4

CVSS3.1

CVE-2025-8313 - Campus Directory <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_m…

The Campus Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccess_msg’ parameter in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level …

📅 Published: Aug. 5, 2025, 6:39 a.m. 🔄 Last Modified: April 20, 2026, 10:15 p.m.

7.2

CVSS3.1

CVE-2025-7050 - Use-your-Drive | Google Drive plugin for WordPress <= 3.3.1- Unauthenticated Stored Cross-Site Scri…

The Use-your-Drive | Google Drive plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in file metadata in all versions up to, and including, 3.3.1 due to insufficient input sanitization and output escaping. This makes it possible for atta…

📅 Published: Aug. 5, 2025, 6:39 a.m. 🔄 Last Modified: April 20, 2026, 8:15 p.m.

6.4

CVSS3.1

CVE-2025-8315 - WP Easy Contact <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_ms…

The WP Easy Contact plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccess_msg’ parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level a…

📅 Published: Aug. 5, 2025, 6:39 a.m. 🔄 Last Modified: April 22, 2026, 5:15 p.m.

6.3

CVSS4.0

CVE-2025-8549 - atjiu pybbs UserAdminController.java update weak password

A vulnerability was found in atjiu pybbs up to 6.0.0. It has been classified as critical. Affected is the function update of the file src/main/java/co/yiiu/pybbs/controller/admin/UserAdminController.java. The manipulation leads to weak password requirements. It is possible to launch the attack remo…

📅 Published: Aug. 5, 2025, 6:32 a.m. 🔄 Last Modified: Sept. 3, 2025, 1:10 p.m.

0.0