CVE-2026-57886: Authorization Bypass Through User-Controlled Key

Cross-repository issue/comment attachment re-linking can expose private attachment content...

Gitea: Cross-repository issue/comment attachment re-linking can expose private attachment content

Summary Gitea's issue and comment attachment update paths accept attachment UUIDs without verifying that each attachment belongs to the target issue/comment repository. If an authenticated attacker knows a victim attachment UUID, they can re-link that attachment to an attacker-controlled issue or...

EUVD-2013-5840

Malware in sbrugna...

CVE-2024-12665

A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5. Affected is an unknown function of the component Task Comment Attachment Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-12665

A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5. Affected is an unknown function of the component Task Comment Attachment Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-12665

CVE-2024-12665 affects ruifang-tech Rebuild 3.8.5; the issue is a cross-site scripting vulnerability in an unknown function of the Task Comment Attachment Upload component. The manipulation enables remote execution of XSS and can be exploited remotely; the exploit has been disclosed publicly. The...

CVE-2024-12665

A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5. Affected is an unknown function of the component Task Comment Attachment Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-12665: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5. Affected is an unknown function of the component Task Comment Attachment Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2013-6010

Cross-site scripting XSS vulnerability in the Comment Attachment plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "Attachment field title."...

Cross site scripting

Cross-site scripting XSS vulnerability in the Comment Attachment plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "Attachment field title."...

CVE-2013-6010

Cross-site scripting XSS vulnerability in the Comment Attachment plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "Attachment field title."...

CVE-2013-6010

CVE-2013-6010 is an XSS vulnerability in the WordPress Comment Attachment plugin (version 1.0). The issue allows injection of arbitrary script/HTML via the Attachment field title. Exploitation details are not provided in the connected documents, but multiple sources confirm the plugin 1.0 XSS beh...

CVE-2013-6010: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Comment Attachment plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "Attachment field title."...

WordPress Comment Attachment 1.0 Cross Site Scripting

Exploit Title: WordPress Comment Attachment 1.0 Discussion Comment Attachment 3 Insert In "Attachment field title" This Code And Save : "alert/Arsan/ 4 And Try To See Your Post And Comment; Follow Link : http://localhost/wp/?p=1 You See Alert "Arsan" ; + Contact Me : [email protected]...