CVE-2026-97295

Cross-Site Request Forgery CSRF vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Cross Site Request Forgery.This issue affects Media LIbrary Assistant: from n/a through 3.42...

CVE-2026-97295 WordPress Media LIbrary Assistant plugin <= 3.42 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Cross Site Request Forgery.This issue affects Media LIbrary Assistant: from n/a through 3.42...

CVE-2026-97295

The David Lingren Media Library Assistant WordPress plugin (version 3.42 and below ) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw allows an attacker to perform unauthorized actions on behalf of a logged-in user. The CVSS v3.1 score is 4.3 (Medium) , with a network...

EUVD-2026-109715

Cross-Site Request Forgery CSRF vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Cross Site Request Forgery.This issue affects Media LIbrary Assistant: from n/a through 3.42...

CVE-2026-111841

Cross-Site Request Forgery CSRF vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Cross Site Request Forgery.This issue affects FunnelKit Automations: from n/a through 3.8.5.2...

CVE-2026-111841 WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Cross Site Request Forgery.This issue affects FunnelKit Automations: from n/a through 3.8.5.2...

EUVD-2026-109674

Cross-Site Request Forgery CSRF vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Cross Site Request Forgery.This issue affects FunnelKit Automations: from n/a through 3.8.5.2...

CVE-2026-111841

The Aman FunnelKit Automations (wp-marketing-automations) WordPress plugin is vulnerable to a Cross-Site Request Forgery (CSRF) flaw. This vulnerability impacts versions from n/a through 3.8.5.2 . An attacker could potentially perform unauthorized actions by tricking an authenticated user into ma...

CVE-2026-115425

The OPNsense firewall (versions 26.7.1_1 and earlier ) is affected by multiple cross-site scripting (XSS) vulnerabilities. These flaws allow a low privileged attacker to execute JavaScript in the context of another user who visits a specific page or interacts with a specifically crafted link. Whi...

CVE-2026-116229

The software ffxiv-teamcraft (up to version 11.4.31 ) contains a cross-site scripting (XSS) vulnerability in the Renderer-Process IPC Bridge component. The root cause is located in the clipboard.readText function within the file apps/electron/src/preload.ts. This vulnerability can be exploited re...

CVE-2026-116227

The Edimax BR-6208AC (version 1.32) is affected by a cross-site scripting (XSS) vulnerability within the Virtual Server Page component. This vulnerability allows for remote exploitation through the manipulation of unknown code, potentially leading to unauthorized script execution in a user's brow...

CVE-2026-116227 Edimax BR-6208AC Virtual Server cross site scripting

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The...

EUVD-2026-109632

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The...

ezXSS

ezXSS is an easy way for penetration testers and bug bounty hunters to test blind Cross Site Scripting. ezXSS is a tool that is designed to help find and exploit cross-site scripting XSS vulnerabilities. One of the key features of ezXSS is its ability to identify and exploit blind XSS...

Web-Security-Learning

Web-Security-Learning Repository: https://github.com/CHYbeta/Web-Security-Learning Knowledge Planet Vulnerability Attack and Defense: https://t.zsxq.com/mm2zBeq Table of Contents: Web-Security-Learning Web Security SQL Injection MySQL MSSQL PostgreSQL MongoDB Techniques Tools XSS CSRF Other...

FOQUZ Platform XSS

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

FOQUZ Platform XSS

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

EUVD-2026-109578

A security vulnerability has been detected in CloudClassroom-PHP-Project. This affects an unknown part of the file addnewstudent.php. Such manipulation of the argument fname leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used...

CVE-2026-116100

A cross-site scripting (XSS) vulnerability exists in gougucms up to version 4.08.18 . The flaw is located in the Add function of the app/admin/controller/Level.php file within the User Level Handler component. By manipulating the Title argument, an attacker can execute a remote XSS attack. Public...

CVE-2026-116097

The CloudClassroom-PHP-Project contains a cross-site scripting (XSS) vulnerability within the addnewstudent.php file. The root cause is the improper neutralization of input when processing the fname argument. This vulnerability can be exploited remotely to execute scripts in a user's browser. Whi...