Web - Daily CVE Reports

Web

CVE-2025-29771: Cross-Site Scripting (XSS) Vulnerability in HtmlSanitizer

Executive Summary CVE-2025-29771 is a cross-site scripting (XSS) vulnerability affecting versions of the HtmlSanitizer library prior to 2.0.3. HtmlSanitizer is a JavaScript library used to sanitize HTML content, often employed in scenarios where user-generated content is rendered in web applications. The vulnerability arises when the library is used

Web

CVE-2025-26936: Critical Code Injection Vulnerability in Fresh Framework

CVE-2025-26936 is a critical code injection vulnerability (CWE-94: Improper Control of Generation of Code) affecting the Fresh Framework WordPress plugin, versions up to and including 1.70.0. This vulnerability allows unauthenticated attackers to execute arbitrary code remotely on a target system, potentially leading to full compromise of the affected