Formwork CMS has Stored Cross-Site Scripting Vulnerebility in Blog Tags

GHSA-7j46-f57w-76pj CVE-2025-65956 MODERATE about 20 hours ago

### Summary Inserting unsanitized data into the blog tag field in Formwork CMS results in stored cross‑site scripting (XSS). Any user with credenti...

packagist

No PRs yet

Snipe-IT has Cross-site Scripting vulnerability in CSV import workflow

GHSA-8x9v-8qgj-945x CVE-2025-64027 MODERATE 5 days ago

Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow. When an invalid CSV file is...

packagist

No PRs yet

phppgadmin contains a SQL injection vulnerability

GHSA-g6xh-wrpf-v6j6 CVE-2025-60798 MODERATE 5 days ago

phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in display.php at line 396. The application passes user-controlled input from ...

packagist

No PRs yet

phppgadmin contains an incorrect access control vulnerability

GHSA-r63p-v37q-g74c CVE-2025-60799 MODERATE 5 days ago

phpPgAdmin 7.13.0 and earlier contains an incorrect access control vulnerability in sql.php at lines 68-76. The application allows unauthorized man...

packagist

No PRs yet

phppgadmin contains a SQL injection vulnerability

GHSA-927w-vq5c-8gc3 CVE-2025-60797 MODERATE 5 days ago

phpPgAdmin 7.13.0 and earlier contains a SQL injection vulnerability in dataexport.php at line 118. The application directly executes user-supplied...

packagist

No PRs yet

MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory

GHSA-mwcc-7vpp-xmv9 CVE-2025-12119 MODERATE 7 days ago

A mongoc_bulk_operation_t may read invalid memory if large options are passed.

packagist

No PRs yet

LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint

GHSA-6pmj-xjxp-p8g9 CVE-2025-65093 MODERATE 7 days ago

## Summary A **Boolean-Based Blind SQL Injection** vulnerability was identified in the LibreNMS application at the `/ajax_output.php` endpoint. Th...

packagist

No PRs yet

Backdrop CMS Host Header Injection vulnerability

GHSA-ffpg-gm3h-4p5p CVE-2025-63828 MODERATE 7 days ago

Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to re...

packagist

No PRs yet

Drupal core allows Object Injection

GHSA-m6vv-vcj8-w8m7 CVE-2025-13081 MODERATE 7 days ago

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection. This is...

packagist

No PRs yet

Drupal Email TFA allows Functionality Bypass

GHSA-9jrw-jrrj-p6fr CVE-2025-12760 MODERATE 7 days ago

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass. This issue affects Email TF...

packagist

No PRs yet

LibreNMS vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint `/maps/nodeimage` parameter `Image Name`

GHSA-j8cq-7f6p-256x CVE-2025-65013 MODERATE 7 days ago

## Summary A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the LibreNMS application at the `/maps/nodeimage` endpoint. The ...

packagist

No PRs yet

Kirby CMS has cross-site scripting (XSS) in the changes dialog

GHSA-84hf-8gh5-575j CVE-2025-65012 MODERATE 7 days ago

### TL;DR This vulnerability affects all Kirby 5 sites that might have potential attackers in the group of authenticated Panel users or that allow...

packagist

No PRs yet

Shopware 6's password recovery link does not expire after email change

GHSA-2w46-vq8h-98vh MODERATE 11 days ago

### Summary When a customer changes their email address after requesting a password reset, the old password reset link (tied to the previous email)...

packagist

No PRs yet

PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal

GHSA-g2j9-g8r5-rg82 CVE-2025-64714 MODERATE 11 days ago

## Summary An unauthenticated Local File Inclusion exists in the template-switching feature: if `templateselection` is enabled in the configuratio...

packagist

No PRs yet

OpenMage vulnerable to XSS in Admin Notifications

GHSA-qv78-c8hc-438r CVE-2025-64174 MODERATE 22 days ago

### Summary OpenMage versions v20.15.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an adm...

packagist

No PRs yet

MantisBT unauthorized disclosure of private project column configuration

GHSA-g582-8vwr-68h2 CVE-2025-62520 MODERATE 22 days ago

### Impact Due to insufficient access-level checks, any non-admin user having access to _manage_config_columns_page.php_ (typically project manage...

packagist

No PRs yet

MantisBT lacks verification when changing a user's email address

GHSA-q747-c74m-69pr CVE-2025-55155 MODERATE 22 days ago

When a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user. ### I...

packagist

No PRs yet

MantisBT Vulnerable to Denial-of-Service (DoS) via Excessive Note Length

GHSA-r3jf-hm7q-qfw5 CVE-2025-46556 MODERATE 22 days ago

A lack of server-side validation for note length in MantisBT allows attackers to permanently corrupt issue activity logs by submitting extremely lo...

packagist

No PRs yet

Drupal CivicTheme Design System allows Cross-Site Scripting (XSS)

GHSA-h72q-cq3w-h3wc CVE-2025-12083 MODERATE 27 days ago

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal CivicTheme Design System allows Cross-...

packagist

No PRs yet

Drupal Currency allows Cross Site Request Forgery

GHSA-27fv-rpgj-4c6m CVE-2025-10930 MODERATE 27 days ago

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Currency allows Cross Site Request Forgery. This issue affects Currency: from 0.0.0 befor...

packagist

No PRs yet

Drupal JSON Field is vulnerable to XSS

GHSA-m3f2-xjgc-2wp2 CVE-2025-10926 MODERATE 27 days ago

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal JSON Field allows Cross-Site Scripting...

packagist

No PRs yet

Drupal Plausible tracking is vulnerable to XSS

GHSA-pr6m-qwrr-mrw9 CVE-2025-10927 MODERATE 27 days ago

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Plausible tracking allows Cross-Site S...

packagist

No PRs yet

Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables

GHSA-fg8x-q69g-4qp3 CVE-2025-10929 MODERATE 27 days ago

Improper Validation of Consistency within Input vulnerability in Drupal Reverse Proxy Header allows Manipulating User-Controlled Variables. This is...

packagist

No PRs yet

Drupal Access code allows Brute Force Attempts

GHSA-27mc-9399-r9mx CVE-2025-10928 MODERATE 27 days ago

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force. This issue affects Access code: f...

packagist

No PRs yet

Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax

GHSA-9f58-4465-23c7 CVE-2025-62798 MODERATE 27 days ago

A Cross-Site Scripting (XSS) vulnerability was discovered in code16/sharp when rendering content using the SharpShowTextField component. In affect...

packagist

No PRs yet

PrivateBin is missing HTML sanitization of attached filename in file size hint

GHSA-867c-p784-5q6g CVE-2025-62796 MODERATE 28 days ago

We’ve identified an HTML injection/XSS vulnerability in PrivateBin service that allows the injection of arbitrary HTML markup via the attached file...

packagist

No PRs yet

Moodle exposed the names of hidden groups to users

GHSA-422v-w6c5-vq42 CVE-2025-62400 MODERATE about 1 month ago

Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal pr...

packagist

No PRs yet

Moodle's error handling leads to sensitive information disclosure

GHSA-c5cj-xp43-qcc3 CVE-2025-62396 MODERATE about 1 month ago

An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers ...

packagist

No PRs yet

Moodle has a time restriction bypass

GHSA-w29j-8phw-ffjf CVE-2025-62401 MODERATE about 1 month ago

An issue in Moodle's timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to co...

packagist

No PRs yet

Moodle does not properly enforce MFA

GHSA-25wf-7x6c-wmpf CVE-2025-62398 MODERATE about 1 month ago

A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially ...

packagist

No PRs yet

Moodle sends quiz-related messages to inactive/suspended users

GHSA-8fcv-4qp9-pg32 CVE-2025-62394 MODERATE about 1 month ago

Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-rel...

packagist

No PRs yet

Moodle course access permissions are not properly checked in course_output_fragment_course_overview

GHSA-rjcm-7v2p-9265 CVE-2025-62393 MODERATE about 1 month ago

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users ...

packagist

No PRs yet

code16 Sharp vulnerable to Cross Site Scripting (XSS)

GHSA-9778-v769-qvjf CVE-2025-61457 MODERATE about 1 month ago

code16 Sharp v9.6.6 is vulnerable to Cross Site Scripting (XSS) src/Form/Fields/SharpFormUploadField.php.

packagist

No PRs yet

ProcessWire CMS vulnerable to resource-exhaustion Denial of Service

GHSA-9p44-q66p-xm6p CVE-2025-60790 MODERATE about 1 month ago

ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Language Support that is auto-extracted without limi...

packagist

No PRs yet

Shopware Customer Orders can be canceled, even if refunds are disabled

GHSA-r2vg-hvjm-fg38 MODERATE about 1 month ago

Refunds in general can be enabled through the administration setting `core.cart.enableOrderRefunds` (in the cart panel).Which visually shows and hi...

packagist

No PRs yet

Shopware exposes sensitive user information via CSV export mapping

GHSA-27c9-vp3w-6ww8 MODERATE about 1 month ago

### Impact Malicious actors can exploit this finding to export sensitive customer information from a Shopware application, including password hashe...

packagist

No PRs yet

Shopware vulnerable to MediaVisibilityRestrictionSubscriber bypass when reading media entities by aggregating fields individually

GHSA-m895-2hj3-8cg9 MODERATE about 1 month ago

In Shopware core and platform versions before 6.6.10.7 and 6.7.3.1, media visibility restrictions applied by MediaVisibilityRestrictionSubscriber a...

packagist

No PRs yet

Citizen vulnerable to stored XSS in sticky header button messages

GHSA-g955-vw6w-v6pp CVE-2025-62508 MODERATE about 1 month ago

### Summary The JS implementation for copying button labels to the sticky header in the Citizen skin unescapes HTML characters, allowing for stored...

packagist

No PRs yet

Cargo Mediawiki Extension vulnerable to Cross-site Scripting

GHSA-gr6v-3pmp-996p CVE-2025-62671 MODERATE about 1 month ago

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation Mediawiki - C...

packagist

No PRs yet

ibexa/fieldtype-richtext has an XSS vulnerability via acronym custom tag in Rich Text

GHSA-8c2g-f8jm-5cr7 MODERATE about 1 month ago

### Impact This security advisory resolves an XSS vulnerability in acronym custom tag in Rich Text, in the back office of the DXP. Back office acce...

packagist

No PRs yet

ibexa/admin-ui has an XSS vulnerability in Cancel/Reschedule future publication modal

GHSA-2mx6-fq24-g2mh MODERATE about 1 month ago

### Impact This security advisory resolves an XSS vulnerability in image asset names, content language names and future publishing in the back offi...

packagist

No PRs yet

ezsystems/ezplatform-admin-ui has an XSS vulnerability in Cancel/Reschedule future publication modal

GHSA-99c7-c3mw-mxhv MODERATE about 1 month ago

### Impact This security advisory resolves an XSS vulnerability in image asset names, content language names and future publishing in the back offi...

packagist

No PRs yet

ibexa/user login enumerates user accounts

GHSA-q3x8-6898-23g3 MODERATE about 1 month ago

### Impact In v5, error messages could provide enough information to tell whether a user exists or not. This is resolved by ensuring the error mess...

packagist

No PRs yet

bagisto has Cross Site Scripting (XSS) in Create New Customer

GHSA-r9xj-mvqf-jm7w CVE-2025-62414 MODERATE about 1 month ago

### Summary In Bagisto v2.3.7, the “Create New Customer” feature (in the admin panel) is vulnerable to reflected / stored Cross-Site Scripting (XSS...

packagist

No PRs yet

bagisto has a Cross Site Scripting (XSS) vulnerability in TinyMCE Image Upload (SVG)

GHSA-fg89-g389-p346 CVE-2025-62418 MODERATE about 1 month ago

### Summary In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges (e.g. admin) to upload a crafte...

packagist

No PRs yet

bagisto has Server Side Template Injection (SSTI) in Product Description

GHSA-527q-4wqv-g9wj CVE-2025-62416 MODERATE about 1 month ago

### Summary Bagisto v2.3.7 is vulnerable to Server-Side Template Injection (SSTI) due to unsanitized user input being processed by the server-side ...

packagist

No PRs yet

PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure

GHSA-fpxp-pfqm-x54w CVE-2025-61923 MODERATE about 1 month ago

# Impact Missing validation on input vulnerable to directory traversal. # Patches The problem has been patched in versions: v4.4.1 for PrestaShop...

packagist

No PRs yet

bagisto has Cross Site Scripting (XSS) issue in TinyMCE Image Upload (HTML)

GHSA-67px-r26w-598x CVE-2025-62415 MODERATE about 1 month ago

### Summary In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges (e.g. admin) to upload a crafte...

packagist

No PRs yet

LibreNMS has a Stored XSS vulnerability in its Alert Transport name field

GHSA-frc6-pwgr-c28w CVE-2025-62411 MODERATE about 1 month ago

### Summary LibreNMS <= 25.8.0 contains a **Stored Cross-Site Scripting (XSS)** vulnerability in the Alert Transports management functionality. Wh...

packagist

No PRs yet

Magento vulnerable to stored Cross-Site Scripting (XSS)

GHSA-pcrx-r49h-x2w5 CVE-2025-54266 MODERATE about 1 month ago

Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting (XSS) ...

packagist

No PRs yet