12 matches found
EUVD-2025-41447
Malicious code in candra-tiwul53-breki npm...
CVE-2024-41447
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function...
CVE-2024-41447
creationtimestamp| type| source ---|---|--- 2025-04-18 16:58:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12485 2025-04-18 20:45:46+00:00| seen| https://t.me/cvedetector/23341...
CVE-2024-41447
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function...
CVE-2024-41447
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function...
CVE-2024-41447
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function...
CVE-2023-41447
creationtimestamp| type| source ---|---|--- 2023-09-28 07:46:38+00:00| seen| https://t.me/cibsecurity/71166 2026-07-06 05:12:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxdco5pfb2g...
CVE-2023-41447
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the index.php component...
CVE-2023-41447
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the index.php component...
CVE-2023-41447
CVE-2023-41447 affects phpkobo AjaxNewTicker v1.0.5. It reports a Cross‑Site Scripting flaw that enables a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in index.php. The NVD entry lists a base score of 6.1 (Medium). Exploitation status is not provided in...