CVE-2024-49379

Proof of Concept PoC for CVE-2024-49379 This repository contains a Python-based Proof of Concept PoC for a critical vulnerability identified in UmbrelOS. The vulnerability allows for Cross-Site Scripting XSS, which can escalate to Remote Code Execution RCE under specific conditions. Overview CVE ...

CVE-2025-30349

Horde IMP vulnerability – obfuscation via HTML encoding – XSS payload Horde 5.2.23; IMP 6.2.27 The details of the vulnerability are explained in Details.md file. The PoC creates and send an email with payload exploiting the vulnerability to the recipient. This kind of email has to be viewed in a...

CVE-2016-10993

CVE-2016-10993 Wordpress Vulnerability - XSS Cross-Site Scripting Vulnerability Location https://themesinfo.com/scoreme-wordpress-theme-design-496 Proof of Concept PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E Refrensi...

osticket-stored-xss-security-assessment

CVE-2026-36214 - osTicket Stored XSS via Bootstrap Tooltip Consultant-Style Cybersecurity Report Professional vulnerability assessment report for osTicket stored cross-site scripting, including business impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details ---|--- Report...

CVE-2021-25791-Multiple-Stored-XSS

CVE-2021-25791-Multiple-Stored-XSS : Multiple Stored XSS Online Doctor Appointment System Multiple stored aunthenticated cross-site scripting exists in the Online Doctor Appointment System V1.0 Software Link:...

blindxss-lite

blindxss-lite A lightweight Blind XSS Cross-Site Scripting collector and payload server built with Flask. It serves a JavaScript payload that captures victim browser data cookies, localStorage, DOM snippets, etc. and forwards it to a SQLite-backed dashboard protected by HTTP Basic Auth. Features...

WolfCMS-XSS-POC

WolfCMS-v0.8.3.1 Cross Site ScriptingXSS Assigned CVE Number: CVE-2018-6890...

CVE-2024-42009

CVE-2024-42009 PoC: Email Capture Listener & XSS Exploit Overview This Proof of Concept PoC demonstrates an exploit for CVE-2024-42009, leveraging a cross-site scripting XSS vulnerability to extract emails from a target webmail application. The attack injects a malicious payload that exfiltrates...

CVE-2023-36158

CVE-2023-36158 Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...

Kentico-Xperience-before-13.0.178---XSS-POC

This repository does not have a README...

CVE-2023-30212-POC-DOCKER-FILE

CVE-2023-30212 POC : Cross-Site Scripting via /client/manage/ourphpout.php Products Affected By CVE-2023-30212 : Vendor| Product| Version ---|---|--- ourphp| ourphp| 7.2.0 Docker Installation Guide : To install OURPHP alertxss" Steps to Reproduce the issue: After completing the setup of the docke...

CVE-2022-43332

CVE-2022-43332 Cross Site Scripting in WonderCMS Description: A cross-site scripting XSS vulnerability in Wondercms v3.3.4 allows potential attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Site title field of the Configuration Panel - coupled with the fac...

EUVD-2026-104926

Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account administrators to inject JavaScript by crafting video-embed links in Help Center articles. Attackers can use angle-bracket link destinations with double quotes to break out of the unescaped iframe src...

CVE-2023-29439

CVE-2023-29439 This repository is about XSS vulnerability in Wordpress Foogallery Plugin. Vulenerability details Description In Foogallery 2.2.35 and earlier, the function foogalleryimageeditormodal in foogallery/includes/admin/class-gallery-attachment-modal.php is vulnerable to XSS attack...

CVE-2026-111844

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brizy Brizy brizy allows Stored XSS.This issue affects Brizy: 2.8.23...

EUVD-2026-104878

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brizy Brizy brizy allows Stored XSS.This issue affects Brizy: 2.8.23...

CVE-2024-40508

CVE-2024-40508 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMConference.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMConference.asmx function. Vulnerable Product...

TYPO3-EXT-SA-2026-033: Cross-Site Scripting in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-033...

CVE-2025-45407

CVE-2025-45407 CVE-2025-45407: Multiple XSS Vulnerabilities in DiscoveryNG v6.0.8 Hotfix 2 Discovered by: YallaSec Security Research Team CVE ID: CVE-2025-45407 Date Published: July 2025...

CVE-2019-15053

CVE-2019-15053 FAB-2019-00156 Vulnerability discoverd by me CVE-2019-15053 Advisory: advisory.txt Basic Info Advisory ID..........: FAB-2019-00156 Product..............: HTML Include and replace macro Manufacturer.........: The Plugin People Affected Versions..: 1.4.2 and before Tested...