CVE-2026-103520

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom text attribute user-defined field name' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output...

CVE-2026-103912

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the '' parameter in all versions up to, and including, 3.6.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-103482

The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptinfields e.g. firstname' parameter in all versions up to, and including, 4.3.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

CVE-2023-2822-demo

CVE-2023-2822-demo CVE-2023-2822 को प्रदर्शित करने के लिए जानबूझकर कमजोर वेब ऐप बनाने हेतु एक सरल फ्लास्क एप्लिकेशन। https://medium.com/@cyberninja717/reflected-cross-site-scripting-vulnerability-in-ellucian-ethos-identity-cas-logout-page-685bb1675dfb पर लिखे गए लेख पर आधारित। docker build -t...

CVE-2019-17625

CVE-2019-17625 रैमबॉक्स 0.6.9 में एक संग्रहीत XSS भेद्यता है, जो उपयोगकर्ता द्वारा सेवा जोड़ते समय name फ़ील्ड में अनसैनिटाइज़्ड पैरामीटर के कारण होती है। चूँकि rambox NodeJS पर चलता है, यह OS कमांड को या टैग में इंजेक्ट करने की अनुमति देता है। नोट: यह कोड केवल MacOS पर परीक्षण किया गया है और अन्...

dorkX

dorkX गूगल डॉर्क स्कैनर के साथ विभिन्न टूल्स को पाइप करें संस्करण 1.0 स्थापना zoid@MSI /dorkX git clone https://github.com/ethicalhackingplayground/dorkX zoid@MSI /dorkX cd dorkX zoid@MSI /dorkX go build dorkx.go zoid@MSI /dorkX go build corsx.go zoid@MSI /dorkX go build csrfx.go zoid@MSI /dorkX ...

s3cXSSer

s3cXSSer سيساعدك هذا الامتداد على اكتشاف ثغرات XSS المستندة إلى GET/POST في أي موقع ويب بسهولة، S3C - XSSER - امتداد كروم كيفية إضافته إلى متصفح كروم أو بريف 1- اذهب إلى brave://extensions/ أو chrome://extensions/ 2- فعّل وضع المطور وانقر على Load unpacked 3- حدد مجلد الامتداد وانقر على Ok تنبيه:...

CVE-2026-87780

The LTL Freight Quotes – Old Dominion Edition WordPress plugin versions before 4.2.19 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to sanitise and escape values submitted via an unauthenticated endpoint before they are stored and subsequently rendered on an a...

EUVD-2026-96130

The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to Stored XSS which will execute in the session of any administrator viewing it...

EUVD-2026-96128

The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing...

CVE-2026-107323

The Gallery PhotoBlocks WordPress plugin versions before 1.3.6 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape specific gallery settings before they are rendered into an HTML attribute. This allows users with Contributor-level acc...

CVE-2026-87780 LTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated Stored XSS via Shipping Rules

The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to Stored XSS which will execute in the session of any administrator viewing it...

CVE-2026-107323 Gallery PhotoBlocks 1.3.5 - Contributor+ Stored XSS

The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Contributor-level access and above to store JavaScript that executes in the browser of anyone who views a page containing...

EUVD-2026-96120

The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections Administrators by default to store JavaScript that executes in the session of any user who later open...

CVE-2026-104754

The Rank Math SEO WordPress plugin (versions before 1.0.280 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to a failure to escape a stored redirection source value. An attacker with permissions to manage redirections (typically Administrators ) can inject malicious JavaScript that execu...

CVE-2026-104754 Rank Math SEO < 1.0.280 - Admin+ Stored XSS via Redirection Source URL

The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections Administrators by default to store JavaScript that executes in the session of any user who later open...

CVE-2022-1597

CVE-2022-1597 डिस्की Discy और हिमर Himer थीम के साथी के रूप में उपयोग किया जाने वाला यह प्लगइन, अपने पासवर्ड रीसेट फ़ॉर्म पर एक पैरामीटर को सैनिटाइज़ और एस्केप नहीं करता है, जिससे रिफ्लेक्टेड क्रॉस-साइट स्क्रिप्टिंग Reflected Cross-Site Scripting हमले करना संभव हो जाता है। प्रभावित प्लगइन्स: WPQA...

PoC_CVE-2024-28157

CVE-2024-28157 - XSS مخزّن في إضافة Jenkins GitBucket GitBucket URL: javascript:alert77 3. احفظ، ثم زُر صفحة المشروع 4. ينطلق التنبيه بـ 49 77 لقطات الشاشة في poc/screenshots/ المراجع NVD https://nvd.nist.gov/vuln/detail/CVE-2024-28157...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - सरल प्रूफ ऑफ कॉन्सेप्ट टूल 🛠 इस एप्लिकेशन के बारे में यह टूल सुरक्षा समस्या CVE-2026-2472 के लिए एक तकनीकी प्रूफ ऑफ कॉन्सेप्ट PoC प्रस्तुत करता है। यह समस्या Google Cloud Platform के Vertex AI Python SDK को प्रभावित करती है। यह Jupyter और Colab नोटबुक ...