1125282 matches found
vulnerabilities present in Microsoft Office
Microsoft has identified vulnerabilities in various Office products. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause damage as described in the following table. For successful exploitation, the malicious individual must deceive the victim into opening ...
CVE-2026-78289
Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...
CVE-2026-78293
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
CVE-2026-78261
Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...
CVE-2026-78273
Subscriber Cross Site Scripting XSS in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78283
Unauthenticated Cross Site Scripting XSS in Music Player for WooCommerce = 1.8.9 versions...
CVE-2026-78281
Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...
CVE-2023-30256
Webkul Qloapps 1.5.2 - Cross-Site Scripting XSS Webkul QloApps 1.5.2: Anfällig für XSS bei zwei Parametern emailcreate und back Exploit - Proof of Concept POC XXS: 'back'-Parameter root@kitploit: Payload Parameter back – Plain text: xss onfocus=alert1 autofocus= xss Payload Parameter back – URL...
CVE-2024-39123-Exploit
CVE-2024-39123: XSS persistente in Calibre-web 0.6.21 Dettagli dell'Exploit Titolo dell'Exploit : XSS persistente in Calibre-web Data : 2024-05-07 Autori dell'Exploit : Catalin Iovita & Alexandru Postolache Pentest-Tools.com Homepage del Venditore : Repository GitHub di Calibre-web Versione :...
EUVD-2026-66947
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
CVE-2026-78293 WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...
CVE-2026-78293
CVE-2026-78293 affects the WordPress plugin WP w3all phpBB (versions ≤ 3.0.6 ), where an unauthenticated Cross Site Scripting (XSS) vulnerability was identified. The issue was discovered by lanlv – HPT Vietnam Corporation and reported via Patchstack. The CVSS 3.1 score is 7.1 (HIGH) with vector A...
CVE-2026-78289
CVE-2026-78289 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the CozyStay WordPress theme, affecting versions 1.10.0 and earlier . The vulnerability was discovered by G0053 and carries a CVSS 3.1 base score of 7.1 (HIGH) with a changed scope, requiring user interaction. The at...
CVE-2026-78289 WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...
EUVD-2026-66945
Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...
EUVD-2026-66941
Unauthenticated Cross Site Scripting XSS in Music Player for WooCommerce = 1.8.9 versions...
CVE-2026-78283 WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Music Player for WooCommerce = 1.8.9 versions...
CVE-2026-78283
CVE-2026-78283 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Music Player for WooCommerce , affecting versions ≤ 1.8.9 . The flaw was discovered by daroo and is scored CVSS 3.1: 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating a ...