CVE-2022-24891

creationtimestamp| type| source ---|---|--- 2022-04-28 00:13:25+00:00| seen| https://t.me/cibsecurity/41539 2025-08-19 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwrspzm3kr2m...

CVE-2022-24891

CVE-2022-24891 affects ESAPI (antisamy-esapi.xml) where an incorrect regular expression for onsiteURL could allow JavaScript: URLs to escape proper sanitization. The issue is fixed in ESAPI 2.3.0.0; workaround is to manually edit antisamy-esapi.xml to adjust the onsiteURL regex. Connected sources...

CVE-2021-24891

creationtimestamp| type| source ---|---|--- 2021-11-23 22:21:05+00:00| seen| https://t.me/cibsecurity/32876 2022-08-13 21:02:10+00:00| published-proof-of-concept| https://t.me/poxek/2182 2023-04-27 09:58:59+00:00| confirmed|...

CVE-2021-24891 Elementor < 3.4.8 - DOM Cross-Site-Scripting

The Elementor Website Builder WordPress plugin before 3.4.8 does not sanitise or escape user input appended to the DOM via a malicious hash, resulting in a DOM Cross-Site Scripting issue...

CVE-2021-24891

The CVE-2021-24891 entry concerns the WordPress Elementor Website Builder plugin: versions prior to 3.4.8 contain a DOM-based XSS due to input being appended to the DOM without proper sanitization/escaping of a malicious hash. In practice, this can allow arbitrary JavaScript execution in the vict...

CVE-2020-24891

CVE-2020-24891 entry is rejected/not used; not a security issue.

Unfixed XSS vulnerability at www.biomedcentral.com

Security researcher nullbyt3, has submitted on 28/07/2010 a cross-site-scripting XSS vulnerability affecting www.biomedcentral.com, which at the time of submission ranked 24891 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...