CVEs published February 23, 2025
30 CVEs were published on February 23, 2025: 0 critical, 3 high.
- Published
- 30
- Critical
- 0
- High
- 3
- Medium
- 27
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- PHPGurukul Online Nurse Hiring System
- 4
- code-projects Blood Bank System
- 3
- SourceCodester Best Church Management Software
- 3
- SourceCodester Best Employee Management System
- 2
- SourceCodester E-Learning System
- 2
- Anhui Xufan Information Technology EasyCVR
- 1
- code-projects Real Estate Property Management System
- 1
- FFmpeg
- 1
- Harpia DiagSystem
- 1
- imithemes Eventer
- 1
High 3
- CVE-2025-22635WordPress Eventer - WordPress Event & Booking Manager Plugin plugin < 3.9.9 - Reflected Cross Site Scripting (XSS) vulnerabilityimithemes Eventer
- CVE-2025-22632WordPress WooCommerce Pricing – Product Pricing plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerabilitytotalsoft WooCommerce Pricing – Product Pricing
- CVE-2025-22631WordPress Marketing Automation Plugin <= 1.2.6.8 - Reflected Cross Site Scripting (XSS) vulnerabilityvbout Marketing Automation
Medium, low and unrated 27
- CVE-2025-1598SourceCodester Best Church Management Software asset_crud.php unrestricted uploadSourceCodester Best Church Management Software
- CVE-2025-1597SourceCodester Best Church Management Software redirect.php cross site scriptingSourceCodester Best Church Management Software
- CVE-2025-1596SourceCodester Best Church Management Software fpassword.php sql injectionSourceCodester Best Church Management Software
- CVE-2025-22633WordPress Give – Divi Donation Modules plugin <= 2.0.0 - Sensitive Data Exposure vulnerabilityStellarWP Give – Divi Donation Modules
- CVE-2025-1595Anhui Xufan Information Technology EasyCVR getbaseconfig information disclosureAnhui Xufan Information Technology EasyCVR
- CVE-2025-1594FFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflowFFmpeg
- CVE-2025-1593SourceCodester Best Employee Management System Profile Picture unrestricted uploadSourceCodester Best Employee Management System
- CVE-2025-1592SourceCodester Best Employee Management System Add Role Page Role.php cross site scriptingSourceCodester Best Employee Management System
- CVE-2025-1591SourceCodester Employee Management System Department Page department.php cross site scriptingSourceCodester Employee Management System
- CVE-2025-1590SourceCodester E-Learning System List of Lessons Page index.php unrestricted uploadSourceCodester E-Learning System
- CVE-2025-1589SourceCodester E-Learning System User Registration register.php cross site scriptingSourceCodester E-Learning System
- CVE-2025-1588PHPGurukul Online Nurse Hiring System manage-nurse.php path traversalPHPGurukul Online Nurse Hiring System
- CVE-2025-1467Versions of the package tarteaucitronjs before 1.17.0 are vulnerable to Cross-site Scripting (XSS) via the getElemWidth() and getElemHeight(tarteaucitronjs
- CVE-2025-1587SourceCodester Telecom Billing Management System Add New Record main.cpp addrecords buffer overflowSourceCodester Telecom Billing Management System
- CVE-2025-1586code-projects Blood Bank System A-.php cross site scriptingcode-projects Blood Bank System
- CVE-2025-1585otale header.html OptionsService cross site scriptingotale tale
- CVE-2025-1584opensolon Solon StaticMappings.java path traversalopensolon Solon · org.noear:solon-web-staticfiles
- CVE-2025-1583PHPGurukul Online Nurse Hiring System search-report-details.php sql injectionPHPGurukul Online Nurse Hiring System
- CVE-2025-1582PHPGurukul Online Nurse Hiring System all-request.php sql injectionPHPGurukul Online Nurse Hiring System
- CVE-2025-1581PHPGurukul Online Nurse Hiring System book-nurse.php sql injectionPHPGurukul Online Nurse Hiring System
- CVE-2025-1580PHPGurukul Nipah Virus Testing Management System search-report-result.php sql injectionPHPGurukul Nipah Virus Testing Management System
- CVE-2025-1579code-projects Blood Bank System user.php cross site scriptingcode-projects Blood Bank System
- CVE-2025-1578PHPGurukul/Campcodes Online Shopping Portal search-result.php sql injectionPHPGurukul Online Shopping Portal · Campcodes Online Shoppi…
- CVE-2025-1577code-projects Blood Bank System prostatus.php cross site scriptingcode-projects Blood Bank System
- CVE-2024-13728Accept Donations with PayPal & Stripe <= 1.4.4 - Reflected Cross-Site Scriptingscottpaterson Accept Donations with PayPal & Stripe
- CVE-2025-1576code-projects Real Estate Property Management System ajax_state.php sql injectioncode-projects Real Estate Property Management System
- CVE-2025-1575Harpia DiagSystem atualatendimento_jpeg.php resource injectionHarpia DiagSystem