EUVD-2026-67459

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Tangible Loops & Logic...

CVE-2022-29455

CVE-2022-29455 Vulnerabilità di Wordpress - XSS Cross-Site Scripting Posizione della vulnerabilità https://add your target here/wp-content/plugins/elementor/assets/js/frontend.min.js Versione vulnerabile Esempio - https://www.youtube.com/watch?v=4qvOkSbhcE...

CVE-2025-31864

CVE-2025-31864 1️⃣ Tipo di componente Plugin WordPress 2️⃣ Dettagli del componente Nome del componente Beam me up Scotty – Back to Top Button Versione vulnerabile = 1.0.23 Slug del componente beam-me-up-scotty Link del componente https://wordpress.org/plugins/beam-me-up-scotty/ 3️⃣ OWASP 2017: TOP...

WSO2-2020-0731

WSO2-2020-0731: ثغرات XXE و XSS في WSO2 Carbon تم تحديد ثغرات XXE و XSS محتملة في العديد من منتجات WSO2. إفصاح البائع: يمكن العثور على إفصاح البائع وإصلاح هذه الثغرة هنا. لماذا لا يوجد CVE؟ لم يقم البائع ولا أنا بطلب CVE لهذه الثغرات. المتطلبات: تتطلب هذه الثغرة: إقناع مستخدم WSO2 شرعي بإضافة...

CVE-2024-34716

CVE-2024-34716PoC Ulteriori dettagli tecnici sono disponibili su https://ayoubmokhtar.com/post/pngdrivenchainxsstoremotecodeexecutionprestashop8.1.5cve-2024-34716/ Installazione pip install -r requirements.txt Utilizzo Usage: python exploit.py --url --email --local-ip --admin-path...

CVE-2020-3580

Scanner Automatico CVE-2020-3580 CVE-2020-3580 - Software Cisco Adaptive Security Appliance ASA e Cisco Firepower Threat Defense FTD XSS. Utilizzo root@kitploit: ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 inserisci i domini/IP che vuoi scansionare in formato fi...

CVE-2025-14340

XSS per appropriazione dell'account admin CVE-2025-14340 Una vulnerabilità di Cross-Site Scripting nell'Interfaccia REST di Amministrazione di Payara permette l'esecuzione di JavaScript controllato dall'attaccante, portando all'appropriazione dell'account admin. A causa di: 1. Il pannello utilizz...

CVE-2024-42834

Exploit-Titel: INCOGNITO SAC GESPEICHERTE CROSS-SITE-SCRIPTING XSS SCHWACHSTELLE Datum: 26. JULI 2024 Exploit-Autor: Etienne Supra Hersteller-Homepage: https://www.incognito.com/products/service-activation-center/ Version: 14.11 CVE : CVE-2024-42834 Der Hersteller wurde informiert und hat die...

jquery-cve-2022-31160

jQuery UI CVE-2022-31160 भेद्यता प्रदर्शन यह प्रोजेक्ट jQuery UI Checkboxradio विजेट भेद्यता CVE-2022-31160 का प्रदर्शन करता है, जो विजेट रिफ्रेश ऑपरेशन के दौरान HTML एंटिटी डिकोडिंग की अनुमति देता है, जो पोटेंशियली क्रॉस-साइट स्क्रिप्टिंग XSS हमलों का कारण बन सकता है। 🚨 सुरक्षा चेतावनी ⚠️ इस...

CVE-2026-78238

SOY Gallery is affected by a cross-site scripting (XSS) vulnerability that allows arbitrary script execution in the web browser of a user who is logging in to the product. The vulnerability requires low privileges and active user interaction , with impact on subsequent system confidentiality and ...

EUVD-2026-67578

SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

CVE-2026-78238

SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

CVE-2026-77838

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

CVE-2026-77838

SOY Calendar is affected by a cross-site scripting (XSS) vulnerability that allows an arbitrary script to be executed in the web browser of a user who is logging in to the product. The vulnerability is scored 5.4 (MEDIUM) under CVSS v3.0, requiring low privileges and user interaction. No fix vers...

EUVD-2026-67577

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

CVE-2026-73827

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

CVE-2026-73827

SOY Calendar is affected by a cross-site scripting (XSS) vulnerability that allows an arbitrary script to be executed in the web browser of a user who is logging into the product. The vulnerability requires low privileges and active user interaction , with a CVSS 3.0 base score of 5.4 (MEDIUM) an...

EUVD-2026-67576

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...

WSO2-2021-1261

WSO2-2021-1261: Múltiplos Cross-Site Scripting no WSO2 ESB Devido à codificação incorreta de saída, múltiplos ataques de Cross-Site Scripting XSS foram identificados no WSO2 ESB. Divulgação do Fornecedor: A divulgação e a correção do fornecedor para esta vulnerabilidade podem ser encontradas aqui...

CVE-2024-56115

CVE-2024-56115 Descrizione suggerita Esiste una vulnerabilità in Amiro.CMS prima della versione 7.8.4 a causa della mancata adozione di misure per neutralizzare elementi speciali. Consente a un attaccante remoto di condurre un attacco Cross-Site Scripting XSS. Tipo di vulnerabilità CWE-78 |...