CVE-2025-29094-Multiple-Stored-Cross-Site-Scripting-XSS

CVE-2025-29094-ثغرات-متعددة-من-نوع-البرمجة-النصية-عبر-المواقع-المخزنة-XSS يكشف هذا المستودع عن ثغرة أمنية تم اكتشافها في نظام إدارة المحتوى Motivian الإصدار 41.0.0. CVE-2025-29094: ثغرات متعددة من نوع البرمجة النصية عبر المواقع المخزنة XSS تم الإبلاغ عن هذه الثغرة للبائع وفقًا لممارسات الإفصاح...

EUVD-2026-71010

phpMyFAQ before 4.1.8 enforces incorrect permission checks on admin content pages, allowing lesser-privileged editors to read draft and inactive content. Attackers with only add permissions can access news edit and FAQ translate endpoints to view unpublished content invisible to the public...

CVE-2025-59117: Improper Neutralization of Input During Web Page Generation

Windu CMS is vulnerable to multiple Stored Cross-Site Scripting XSS vulnerabilities in the page editing endpoint windu/admin/content/pages/edit/. This vulnerability can be exploited by a privileged user and may target users with higher privileges. Only version 4.1 was tested and confirmed as...

EUVD-2022-6738

Malicious code in bioql PyPI...

EUVD-2024-1633

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-10960

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MediaWiki before 1.34.1, users can add various Cascading Style Sheets CSS classes which can affect what content is shown or hidden in the user interface to...

CVE-2025-29094

Cross Site Scripting vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Marketing/Forms, Marketing/Offers and Content/Pages components...

CVE-2025-29094: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Marketing/Forms, Marketing/Offers and Content/Pages components...

📄 Motivian Content Management System 41.0.0 Cross Site Scripting

Motivian Content Management System version 41.0.0 suffers from multiple cross site scripting vulnerabilities. CVE-2025-29094-Multiple-Stored-Cross-Site-Scripting-XSS This repository reveals a security vulnerability discovered in Motivian Content Management System v.41.0.0. - CVE-2025-29094:...

CVE-2020-24404

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization...

PT-2020-7208

Name of the Vulnerable Software and Affected Versions Axous versions 1.1.1 and earlier Description Multiple cross-site request forgery CSRF and cross-site scripting XSS issues allow remote attackers to hijack the authentication of administrators for requests. This can be done via various paramete...

PT-2019-18829

Name of the Vulnerable Software and Affected Versions Magento 2.1 versions prior to 2.1.18 Magento 2.2 versions prior to 2.2.9 Magento 2.3 versions prior to 2.3.2 Description A stored cross-site scripting issue exists in the admin panel. This could be exploited by an authenticated user with...

DRUPAL-CONTRIB-2019-039

This module enables you to add social media share buttons on your website to its content and pages. The module doesn't sufficiently mark its administration permission restricted, allowing cross site scripting vulnerabilities to users who have access to its admin settings. This vulnerability is...