cve-2019-10070-apache-atlas-xss

This repository does not have a README...

JustRows WordPress - Cross-Site Scripting

JustRows free WordPress plugin v0.2 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

Site Reviews < 7.2.5 - Unauthenticated Stored XSS

Site Reviews WordPress plugin before 7.2.5 contains a stored cross-site scripting caused by improper sanitization and escaping of review fields, letting unauthenticated users execute malicious scripts, exploit requires no authentication. id: CVE-2025-1232 info: name: Site Reviews 7.2.5 -...

BIBLIOsoft BIBLIOpac 2008 - Cross-Site Scripting

BIBLIOsoft BIBLIOpac 2008 contains a cross-site scripting vulnerability via the db or action parameter to bin/wxis.exe/bibliopac/, which allows a remote attacker to inject arbitrary web script or HTML. id: CVE-2018-16139 info: name: BIBLIOsoft BIBLIOpac 2008 - Cross-Site Scripting author:...

vulnknox

VulnKnoX VulnKnox is a powerful command-line tool written in Go that interfaces with the KNOXSS API. It automates the process of testing URLs for Cross-Site Scripting XSS vulnerabilities using the advanced capabilities of the KNOXSS engine. Features Supports pipe input for passing file lists and...

xss_vulnerability_challenges

XSS 漏洞场景（挑战） 本仓库是一个 Docker 化的 PHP 应用程序，包含了一些 XSS 漏洞挑战。 挑战背后的思路包括： JavaScript 验证绕过 HTML 实体绕过 WAF 绕过 黑名单验证绕过 基础 XSS 验证绕过 利用双层编码绕过 WAF 以利用 XSS 通过绕过转义字符利用 XSS 使用 Docker 快速开始 使用 Docker Hub（最快）： 1. 要访问这些挑战，你需要安装 Docker。 2. 运行以下命令从 Docker Hub 拉取并运行镜像： sudo docker run -d -p 9003:80...

xss_vulnerability_challenges

XSS Vulnerability Scenarios challenges This repository is a Dockerized php application containing some XSS vulnerability challenges. The ideas behind challenges are: Javascript validation bypass html entities bypass WAF bypass Black-list validation bypass Basic XSS validation bypass Double encode...

BIT-TOMCAT-2026-50229 Apache Tomcat: XSS in number guess example

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess example for Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0 through 11.0.22, from 10.1.0 through 10.1.55, from 9.0.0 through 9.0.118, from 8.5.0 through 8.5.100, from 7.0.0...

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpri...

CVE-2026-78742

Silverpeas Core versions up to and including 6.4.6 are vulnerable to Cross Site Scripting (XSS) via the Multimedia library application introduction field. The flaw allows an attacker to inject malicious scripts that execute in another user's browser, with changed scope and low impact on both conf...

CVE-2026-81776

CVE-2026-81776 affects the WordPress WP QuickLaTeX plugin in versions

CVE-2026-84781

Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.4 versions...

CVE-2026-81778 WordPress Kalles Addons plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Kalles Addons = 1.0.6 versions...

Security Bulletin: XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-36431)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed XSS vulnerability. Vulnerability Details CVEID:CVE-2025-36431 DESCRIPTION: IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.01 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.01 is vulnerable to cross-site...

EUVD-2026-41144

Silverstripe Framework: Possible XSS attack through media embed...

CVE-2026-78293 WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...

CVE-2026-78293

CVE-2026-78293 affects the WordPress plugin WP w3all phpBB (versions ≤ 3.0.6 ), where an unauthenticated Cross Site Scripting (XSS) vulnerability was identified. The issue was discovered by lanlv – HPT Vietnam Corporation and reported via Patchstack. The CVSS 3.1 score is 7.1 (HIGH) with vector A...

CVE-2026-78264 WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...

CVE-2026-78290

Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.6 versions...

Astra Linux – Vulnerability in twitter-bootstrap3

Improper neutralization of input during web page generation XSS or “cross-site scripting” vulnerability in Bootstrap allows cross-site scripting. This issue affects Bootstrap: from version 3.4.1 to 4.0.0...