EUVD-2025-204822

CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding. Attackers can inject malicious scripts by encoding payloads like '-alert1// and execute arbitrary JavaScript when victims interact with delete buttons...

canvaschamp.com XSS vulnerability

Vulnerable URL: https://www.canvaschamp.com/facebook.php?title=this%20is%20custom%20title=Custom%20Descriptionℑ=xss%22%3E%3Csvg/onload=prompt/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.12.2017 Vulnerability type:| XSS Vulnerability status:|...