Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS

CVE-2021-46074 Exploit Title: Vehicle Service Management System - 'Settings' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

CVE-2026-46074

creationtimestamp| type| source ---|---|--- 2026-07-02 06:49:45+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

BELL-CVE-2026-46074

Bulletin has no description...

DEBIAN-CVE-2026-46074

In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix memory leaks on probe failures Make sure to deregister the controller, disable pins, and kill and free the RX URB on probe failures to mirror disconnect and avoid memory leaks and use-after-free. Also add an...

CVE-2023-46074

creationtimestamp| type| source ---|---|--- 2023-10-26 16:16:00+00:00| seen| https://t.me/cibsecurity/72950...

CVE-2023-46074

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Borbis Media FreshMail For WordPress plugin = 2.3.2 versions...

CVE-2023-46074

CVE-2023-46074 is an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability in the Borbis Media FreshMail For WordPress plugin, affected versions ≤ 2.3.2. Public sources identify this as a WordPress plugin issue with CVSS context indicating medium severity, and references consistentl...

CVE-2023-46074 WordPress FreshMail For WordPress Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Borbis Media FreshMail For WordPress plugin = 2.3.2 versions...

WordPress FreshMail For WordPress Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)

Software FreshMail For WordPress Type Plugin Vulnerable versions = 2.3.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46074 Patch priority Medium CVSS severity Medium 5.8 Developer Claim ownership PSID bc13c89450f9 Credits LEE SE HYOU...

CVE-2022-46074

creationtimestamp| type| source ---|---|--- 2022-12-14 20:23:00+00:00| seen| https://t.me/cibsecurity/54527 2025-04-22 03:02:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12786...

CVE-2022-46074

Helmet Store Showroom 1.0 is affected by CVE-2022-46074: a CSRF vulnerability due to missing CSRF protection enables an unauthenticated attacker to add an admin account. This is a high-severity issue (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The connected documents provide product/version...

CVE-2021-46074

creationtimestamp| type| source ---|---|--- 2022-01-06 18:41:16+00:00| seen| https://t.me/cibsecurity/35061 2022-01-14 20:05:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1331...

CVE-2021-46074

Sourcecodester Vehicle Service Management System 1.0 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Settings section of the login panel. The vulnerability stems from insufficient validation of client-side data, allowing injected scripts to be stored and potentially execut...