CVE-2026-11772

DRIMO CMS is affected by a Reflected XSS in the searching functionality, triggered via the q parameter. The vulnerability allows arbitrary JavaScript execution in the victim’s browser when a crafted URL is opened. The affected software is at end-of-life and no security updates are planned. Mitiga...

CVE-2025-40700

Reflected Cross-Site Scripting XSS in IDI Eikon's Governalia. The vulnerability allows an attacker to execute JavaScript code in the victim's browser when a malicious URL with the 'q' parameter in '/search' is sent to them. This vulnerability can be exploited to steal sensitive information such a...

CVE-2025-40725 Reflected Cross-Site Scripting (XSS) in Azon Dominator

Reflected Cross-Site Scripting XSS vulnerability in Azon Dominator. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the “q” parameter in /search via GET. This vulnerability can be exploited to steal sensitive user data...

CVE-2025-40725 Reflected Cross-Site Scripting (XSS) in Azon Dominator

Reflected Cross-Site Scripting XSS vulnerability in Azon Dominator. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the “q” parameter in /search via GET. This vulnerability can be exploited to steal sensitive user data...

The vulnerability in the Splunk Web platform for operational analysis of Splunk Enterprise’s web interface allows attackers to bypass security restrictions, increase their privileges, and execute arbitrary commands.

The vulnerability in the Splunk Web platform for operational analysis in Splunk Enterprise relates to insufficient protection of sensitive data when processing the /services/streams/search endpoint with the q parameter. Exploiting this vulnerability allows an attacker to bypass security...

CVE-2018-10704

yidashi yii2cmf 2.0 has XSS via the /search q parameter...

CVE-2019-15489

laracom aka Laravel FREE E-Commerce Software 1.4.11 has search?q= XSS...

CVE-2019-15489

laracom aka Laravel FREE E-Commerce Software 1.4.11 has search?q= XSS...

CVE-2019-15489

laracom aka Laravel FREE E-Commerce Software 1.4.11 has search?q= XSS...

PT-2019-14218

Name of the Vulnerable Software and Affected Versions laracom aka Laravel FREE E-Commerce Software version 1.4.11 Description The issue is related to a Cross-site Scripting vulnerability. It occurs via the search query, where the search?q= parameter is vulnerable to XSS attacks. No information is...

CVE-2019-15489: Improper Neutralization of Input During Web Page Generation

laracom aka Laravel FREE E-Commerce Software 1.4.11 has search?q= XSS...

CVE-2019-11427

An XSS issue was discovered in app/search/search.app.php in idreamsoft iCMS 7.0.14 via the public/api.php?app=search q parameter...

PT-2018-17263

Name of the Vulnerable Software and Affected Versions: Affiligator Affiliate Webshop Management System version 2.1.0 Description: A SQL Injection issue exists in the Affiligator Affiliate Webshop Management System. The issue can be exploited via the /search/?q=&price type=range&price= API endpoin...

CVE-2018-5977: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Affiligator Affiliate Webshop Management System 2.1.0 via a search/?q=&pricetype=range&price= request...