Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

High CVSS: 7.0 Yayın: 2025-01-23 17:15:12

CVE-2024-11147

Ecovacs Deebot 900 Firmware CWE-798

ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.

High CVSS: 7.1 Yayın: 2025-01-23 16:15:40

CVE-2025-23960

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in basteln3rk Save & Import Image from URL save-import-image-from-url allows Reflected XSS.This issue affects Save & Import Image from URL: from n/a th…

High CVSS: 7.1 Yayın: 2025-01-23 16:15:40

CVE-2025-23894

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tatsuya wp-flickr-press wp-flickr-press allows Reflected XSS.This issue affects wp-flickr-press: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:40

CVE-2025-23836

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SuryaBhan Custom Coming Soon custom-coming-soon allows Reflected XSS.This issue affects Custom Coming Soon: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:40

CVE-2025-23835

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jmraya Legal + legal-plus allows Reflected XSS.This issue affects Legal +: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:40

CVE-2025-23834

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RaminMT Links/Problem Reporter report-broken-links allows Reflected XSS.This issue affects Links/Problem Reporter: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:40

CVE-2025-23733

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sayoko SC Simple Zazzle sc-simple-zazzle allows Reflected XSS.This issue affects SC Simple Zazzle: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:39

CVE-2025-23730

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flx0 FLX Dashboard Groups flx-dashboard-groups allows Reflected XSS.This issue affects FLX Dashboard Groups: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:39

CVE-2025-23729

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fures XTRA Settings xtra-settings allows Reflected XSS.This issue affects XTRA Settings: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:39

CVE-2025-23727

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in antonzaroutski AZ Content Finder az-content-finder allows Reflected XSS.This issue affects AZ Content Finder: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:39

CVE-2025-23725

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pshikli Accessibility Task Manager accessibility-task-manager allows Reflected XSS.This issue affects Accessibility Task Manager: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:39

CVE-2025-23724

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in oleksandr87 University Quizzes Online university-quizzes-online allows Reflected XSS.This issue affects University Quizzes Online: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:39

CVE-2025-23723

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hdw player Plestar Directory Listing plestar-directory-listing allows Reflected XSS.This issue affects Plestar Directory Listing: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:39

CVE-2025-23722

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mind3dom Mind3doM RyeBread Widgets mind3dom-ryebread-widgets allows Reflected XSS.This issue affects Mind3doM RyeBread Widgets: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:38

CVE-2025-23636

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitar A. My Favorite Car my-favorite-cars allows Reflected XSS.This issue affects My Favorite Car: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:38

CVE-2025-23634

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codehandling Youtube Video Grid youmax-channel-embeds-for-youtube-businesses allows Reflected XSS.This issue affects Youtube Video Grid: from n/a th…

High CVSS: 7.1 Yayın: 2025-01-23 16:15:38

CVE-2025-23629

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Subhasis Laha Gallerio gallerio allows Reflected XSS.This issue affects Gallerio: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:38

CVE-2025-23628

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NewMediaOne GeoDigs geodigs allows Reflected XSS.This issue affects GeoDigs: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:38

CVE-2025-23626

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fukushima Kumihimo kumihimo allows Reflected XSS.This issue affects Kumihimo: from n/a through

High CVSS: 7.1 Yayın: 2025-01-23 16:15:38

CVE-2025-23624

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alessandro Benoit WpDevTool wpdevtool allows Reflected XSS.This issue affects WpDevTool: from n/a through