Lucene search
K

11448 matches found

Vulnrichment
Vulnrichment
added 2026/01/26 9:32 p.m.4 views

CVE-2026-1444 iJason-Liu Books_Manager add_book_check.php cross site scripting

A vulnerability has been found in iJason-Liu BooksManager up to 298ba736387ca37810466349af13a0fdf828e99c. This affects an unknown part of the file controllers/bookscenter/addbookcheck.php. Such manipulation of the argument mark leads to cross site scripting. The attack can be launched remotely. T...

4.8CVSS4.2AI score0.00206EPSS
Exploits0References4
OSV
OSV
added 2026/01/26 6:16 a.m.5 views

CVE-2026-1421

A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used...

5.4CVSS3.9AI score0.00262EPSS
Exploits1References5
NVD
NVD
added 2026/01/26 6:16 a.m.4 views

CVE-2026-1421

A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used...

5.4CVSS0.00262EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/01/26 5:32 a.m.5 views

CVE-2026-1421

A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used...

5.4CVSS4.2AI score0.00262EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/26 5:32 a.m.5 views

CVE-2026-1421 code-projects Online Examination System Add Pages cross site scripting

A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used...

5.1CVSS4.2AI score0.00262EPSS
Exploits1References5
CVE
CVE
added 2026/01/26 5:32 a.m.17 views

CVE-2026-1421

CVE-2026-1421 affects code-projects Online Examination System 1.0, specifically the Add Pages component. The vulnerability is a cross-site scripting flaw that can be triggered remotely via the affected function, with exploitation publicly disclosed. Multiple connected sources corroborate the issu...

5.4CVSS3.5AI score0.00262EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2026/01/26 5:32 a.m.8 views

EUVD-2026-4700

A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used...

5.1CVSS4.2AI score0.00262EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/01/26 5:32 a.m.29 views

CVE-2026-1421 code-projects Online Examination System Add Pages cross site scripting

A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used...

5.1CVSS0.00262EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/01/26 12:0 a.m.12 views

PT-2026-4724

Name of the Vulnerable Software and Affected Versions code-projects Online Examination System version 1.0 Description A flaw exists in the Add Pages component of the software, allowing for cross site scripting. This manipulation can be executed remotely. The exploit details have been publicly...

5.4CVSS4.6AI score0.00262EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2026/01/26 12:0 a.m.5 views

PT-2026-4819

Name of the Vulnerable Software and Affected Versions iJason-Liu Books Manager affected versions not specified Description A cross site scripting issue exists in the file controllers/books center/add book check.php. Manipulation of the mark argument can lead to exploitation. The attack can be...

4.8CVSS5AI score0.00206EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2026/01/24 3:17 p.m.3 views

CVE-2026-24620

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginOps Landing Page Builder page-builder-add allows Stored XSS.This issue affects Landing Page Builder: from n/a through = 1.5.3.4...

5.9CVSS5.9AI score0.00176EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/24 9:15 a.m.11 views

CVE-2026-0773

Upsonic Cloudpickle Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Upsonic. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

9.8CVSS6.6AI score0.01146EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/24 9:8 a.m.3 views

CVE-2025-13139

The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.20. This is due to missing nonce validation on the SurveyJSAddSurvey AJAX action. This makes it possible for unauthenticated attackers to...

4.3CVSS5.8AI score0.00126EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2026/01/24 12:25 a.m.2 views

SUSE CVE-2025-71149

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

6.3CVSS6AI score0.00018EPSS
Exploits0References20
CNNVD
CNNVD
added 2026/01/24 12:0 a.m.6 views

WordPress plugin SurveyJS: Drag & Drop WordPress Form Builder – Cross-site Request Forgery Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

4.3CVSS5.7AI score0.00126EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/23 3:24 p.m.5 views

CVE-2026-22986

In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix race condition for gdev-srcu If two drivers were calling gpiochipadddatawithkey, one may be traversing the srcu-protected list in gpionametodesc, meanwhile other has just added its gdev in gpiodevaddtolistunlocked...

5.7AI score0.00087EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2026/01/23 3:16 p.m.7 views

CVE-2026-24633

Missing Authorization vulnerability in Passionate Brains Add Expires Headers & Optimized Minify add-expires-headers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Expires Headers & Optimized Minify: from n/a through = 3.2.0...

5.3CVSS0.00225EPSS
Exploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.5 views

CVE-2026-24620

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginOps Landing Page Builder page-builder-add allows Stored XSS.This issue affects Landing Page Builder: from n/a through = 1.5.3.4...

5.9CVSS0.00176EPSS
Exploits0References1
OSV
OSV
added 2026/01/23 3:16 p.m.6 views

AZL-75147 CVE-2025-71149 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: iouring/poll: correctly handle iopolladd return value on update When the core of iouring was updated to handle completions consistently and with fixed return codes, the POLLREMOVE opcode with updates got slightly broken. If a...

5.8AI score0.00018EPSS
Exploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.2 views

CVE-2025-71149

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

0.00018EPSS
Exploits0
Rows per page
Query Builder