Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-67978 2 Fixbd, Wordpress 2 Educare, Wordpress 2026-02-23 N/A
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FixBD Educare educare allows Reflected XSS.This issue affects Educare: from n/a through <= 1.6.1.
CVE-2023-25971 1 Fixbd 1 Educare 2025-01-08 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in FixBD Educare plugin <= 1.4.1 versions.