Timesheet Next Gen <=1.5.3 - Cross-Site Scripting

Timesheet Next Gen 1.5.3 and earlier is vulnerable to cross-site scripting that allows an attacker to execute arbitrary HTML and JavaScript code via a "redirect" parameter. The component is: Web login form: login.php, lines 40 and 54. The attack vector is: reflected XSS, victim may click the...

DomainMOD <=4.13.0 - Cross-Site Scripting

DomainMOD through 4.13.0 contains a cross-site scripting vulnerability via /reporting/domains/cost-by-month.php in Daterange parameters. id: CVE-2019-15811 info: name: DomainMOD =4.13.1 to mitigate this vulnerability. reference: - https://www.exploit-db.com/exploits/47325 -...

Custom 404 Pro < 3.2.8 - Cross-Site Scripting

Custom 404 Pro before 3.2.9 is susceptible to cross-site scripting via the title parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...

ChurchCRM 4.5.3 - Cross-Site Scripting

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the NoteEditor.php. id: CVE-2023-26843 info: name: ChurchCRM 4.5.3 - Cross-Site Scripting author: Harsh severity: medium description: | A stored Cross-site scripti...

Simple URLs < 115 - Cross Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-0099 info: name: Simple URLs 115 - Cross Site Scripting author: r3Y3r53 severit...

phpIPAM - 1.6 - Cross-Site Scripting

phpIPAM 1.6 contains a cross-site scripting vulnerability via the closeClass parameter at /subnet-masks/popup.php. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Aajoda Testimonials < 2.2.2 - Cross-Site Scripting

The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. id: CVE-2023-2178 info: name: Aajoda Testimonials...

EyouCms v1.6.2 - Cross-Site Scripting

EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /admin/twitter.php?activet. id: CVE-2023-41597 info: name: EyouCms v1.6.2 - Cross-Site Scripting author: ritikchaddha severity: medium description: | EyouCms v1.6.2 was discovered to...

ECT Home Page Products - Reflected XSS

ECT Home Page Products WordPress plugin through 1.9 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such as admin, exploit...

WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting

WordPress Stop User Enumeration 1.3.7 and earlier are vulnerable to unauthenticated reflected cross-site scripting. id: CVE-2017-18536 info: name: WordPress Stop User Enumeration =1.3.7 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress Stop User Enumeration 1.3.7 an...

McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting

McAfee Network Data Loss Prevention User-Agent 9.3.x contains a cross-site scripting vulnerability which allows remote attackers to get session/cookie information via modification of the HTTP request. id: CVE-2017-4011 info: name: McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting...

Cherokee HTTPD <=0.5 - Cross-Site Scripting

Cherokee HTTPD 0.5 and earlier contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. id: CVE-2006-1681 info:...

Session-Persistence-After-Enabling-2FA-CVE-2025-60425

启用双因素认证后会话持久化 概述 Nagios Fusion 应用程序（版本 2024R1.2 和 2024R2）存在一个高危安全漏洞：即使在启用双因素认证（2FA）后，现有会话仍然保持有效。具体而言，当为管理员账户启用 2FA 时，应用程序未能失效所有在启用 2FA 之前建立的活跃会话。这使得能够访问旧会话的攻击者或未授权用户能够绕过 2FA 机制，执行未授权操作。 观察到以下问题： 会话持久化：启用 2FA 之前创建的会话仍然有效，无需额外的身份验证因素。 未授权权限提升：攻击者可利用这些旧会话，在无需 2FA 验证的情况下修改关键账户详情或执行管理操作。 此漏洞源于在启用 2FA...

CVE-2025-55580

CVE-2025-55580 - SolidInvoice 客户端存储型跨站脚本（XSS）漏洞 概述 SolidInvoice 在客户端模块中存在一个存储型跨站脚本（XSS）漏洞。经过身份验证的攻击者可以向应用程序注入任意 JavaScript，并随后在用户浏览器中执行。 受影响版本 受影响版本： 2.3.7 已修复版本： 2.3.8 影响 攻击者可以利用该漏洞在应用程序中存储任意 JavaScript，并在其他经过身份验证的用户查看 客户端 页面时执行。如果应用程序部署在多用户环境中——例如有多个管理员——则可能导致： 会话劫持 凭证或令牌窃取 钓鱼或社会工程攻击...

CVE-2025-50866

CloudClassroom-PHP-Project 1.0 在 postquerypublic 端点的 email 参数中存在反射型跨站脚本（XSS）漏洞。不充分的清理机制允许攻击者注入任意 JavaScript 代码，该代码在用户浏览器上下文中执行，可能导致会话劫持或钓鱼攻击。 漏洞类型 : 跨站脚本（XSS） 产品供应商 : https://github.com/mathurvishal/CloudClassroom-PHP-Project 受影响产品代码库 : https://github.com/mathurvishal/CloudClassroom-PHP-Project 1...

EUVD-2026-89474

The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover...

EUVD-2026-89476

An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application...

CVE-2026-13046

A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling samld allows an attacker who has already obtained the ability to write files on the appliance to execute arbitrary code in the context of the samld service by causing samld to load a...

CVE-2025-48461

CVE-2025-48461 可预测的会话cookie，可通过暴力破解获得对Advantech WISE门户的未授权访问 摘要 在检查Advantech WISE-4060 web门户时，我发现用于认证到web门户的会话cookie遵循模式60D01EXXXXX。这使得任何未授权的攻击者能够生成所有会话cookie的所有可能排列，并对门户进行暴力破解攻击，以找到用于认证到web门户的有效会话cookie。此漏洞是在由CSA（新加坡网络安全局）组织的SPIRICYBER-24 IoT/OT黑客马拉松期间发现的。 影响 任何未经授权的用户都能以管理员用户身份进行认证，并修改Advantech...

CVE-2026-13046 Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution

A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling samld allows an attacker who has already obtained the ability to write files on the appliance to execute arbitrary code in the context of the samld service by causing samld to load a...