Lucene search
K

7 matches found

NVD
NVD
added 2025/08/26 5:15 p.m.3 views

CVE-2025-57425

A Stored Cross-Site Scripting XSS vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint...

6.1CVSS0.00068EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/08/26 12:0 a.m.3 views

PT-2025-34788 · Sourcecodester · Faq Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester FAQ Management System version 1.0 Description: A Stored Cross-Site Scripting XSS vulnerability exists in the FAQ Management System. An authenticated attacker can inject malicious JavaScript into the question and answer fields...

6.1CVSS5.2AI score0.00068EPSS
Exploits1References5
NVD
NVD
added 2024/04/22 8:15 p.m.6 views

CVE-2024-32405

Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote attacker to escalate privileges via a crafted payload to the Answer field of InlineMultiQuestion parameter on Exam function...

2.6CVSS6.4AI score0.00249EPSS
Exploits1References2
CVE
CVE
added 2024/04/22 12:0 a.m.68 views

CVE-2024-32405

This CVE (CVE-2024-32405) affects Inducer Relate prior to 2024.1. A Cross Site Scripting (XSS) flaw exists in the InlineMultiQuestion/Answer handling within the Exam function, allowing a remote attacker to escalate privileges via a crafted payload. Root cause: unsanitized input in the Answer fiel...

2.6CVSS6.7AI score0.00249EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/22 12:0 a.m.3 views

PT-2024-24550 · Inducer · Inducer

Name of the Vulnerable Software and Affected Versions: inducer relate versions prior to 2024.1 Description: The issue allows a remote attacker to escalate privileges via a crafted payload to the Answer field of InlineMultiQuestion parameter on Exam function. This enables the attacker to execute...

2.6CVSS7.7AI score0.00249EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/04/22 12:0 a.m.10 views

CVE-2024-32405

Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote attacker to escalate privileges via a crafted payload to the Answer field of InlineMultiQuestion parameter on Exam function...

6.6AI score0.00249EPSS
Exploits1References2
Packet Storm
Packet Storm
added 2012/07/16 12:0 a.m.24 views

PBBoard CMS 2.1.4 CSRF / Cross Site Scripting

Title: ====== PBBoard v2.1.4 CMS - Multiple Web Vulnerabilities Date: ===== 2012-06-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=623 VL-ID: ===== 625 Common Vulnerability Scoring System: ==================================== 4.5 Introduction: ============= PBBoard...

0.1AI score
Exploits0
Rows per page
Query Builder