The vulnerability of the FOQUZ platform, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the FOQUZ platform, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the FOQUZ platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

CVE-2026-105871

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6...

WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Prime Slider – Addons For Elementor versions = 4.6.2...

WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Quiz And Survey Master versions = 11.2.7...

EUVD-2026-94249

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6...

CVE-2026-105871 WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6...

EUVD-2026-94247

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6...

awesome-web-security

Awesome Web Security - ZH 🐶 Curated list of Web Security materials and resources. Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage ...

CVE-2019-1218

CVE-2019-1218 Outlook iOS 欺骗漏洞 我在 iOS Outlook 移动应用程序中发现了 XSS。Microsoft Outlook for iOS 中存在一个严重漏洞，可能允许攻击者控制受害者的设备。该安全问题可能使恶意行为者能够使用电子邮件客户端在任何 iOS 智能手机或平板电脑上执行跨站脚本（XSS）攻击。这是由于软件解析特制电子邮件消息的方式所致。 通过使用 JavaScript 载荷，可以修改应用程序上的内容。 Microsoft Outlook iOS...

CVE-2024-4367-PoC

CVE-2024-4367-PoC 此概念验证（PoC）演示了对CVE-2024-4367漏洞的利用，该漏洞涉及跨站脚本（XSS）攻击。 功能 此PoC收集并显示以下类型的信息： 1. 常规信息： 域名 标题 当前URL 来源URL 与域名关联的Cookie 2. 浏览器环境信息： LocalStorage和SessionStorage数据 用户代理 屏幕分辨率 平台（操作系统） 3. Web特性： Cookie启用/禁用状态 请勿追踪状态 最大触摸点数（适用于移动设备） 连接类型（例如4G、WiFi） 电池电量（如果可用） 4. 屏幕信息： 屏幕分辨率 色深 可用宽度和高度...

0l4bs

0l4bs 面向 Web 应用安全爱好者的跨站脚本实验室 挑战列表： Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 | Removes Alert Chall 11 | Removes Script Chall 12 | Pregreplace Chall 13 |...

0l4bs

0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 | Removes Alert Chall...

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

Bootstrap-with-XSS

Bootstrap 历史漏洞 PoC 集合 这是一个用于学习和研究的静态 HTML 页面，集成了多个 Bootstrap 框架历史上的跨站脚本（XSS）漏洞概念验证（PoC）。 此项目旨在为安全研究人员、开发者和学生提供一个安全、可控的环境，用于理解和验证这些特定的安全漏洞，而无需搭建复杂的服务器环境。 ⚠️ 重要安全警告 仅供学习研究 ：此项目及其所有代码仅用于授权的、合法的安全研究和教学目的。 严禁非法攻击 ：严禁使用此工具或其包含的任何代码对任何您不拥有或未获明确授权的网站进行测试或攻击。未经授权的渗透测试是违法行为。 风险自负 ：您对使用此项目所造成的一切后果负全部责任。 🚀...

CVE-2022-29455

CVE-2022-29455 Vulnerabilidad de WordPress - XSS Cross-Site Scripting Ubicación de la vulnerabilidad https://add your target here/wp-content/plugins/elementor/assets/js/frontend.min.js Versión vulnerable Ejemplo - https://www.youtube.com/watch?v=4qvOkSbhcE...

XSSight

ADVERTENCIA: Esta página es solo para educación; cualquier propósito malicioso por parte de los usuarios que la utilicen será castigado conforme a la ley. XSSight Cross-site Scripting XSS Cross-site Scripting XSS es una técnica de ataque que implica reflejar código proporcionado por el atacante e...

CVE-2022-30513

CVE-2022-30513 School Dormitory Management System 1.0 - XSS Reflejado Título del Exploit: School Dormitory Management System 1.0 - XSS Reflejado Fecha: 2022-05-25 CVE: CVE-2022-30513 Autor del Exploit: Abdulaziz Saad @b4zb0z Página del vendedor: https://www.sourcecodester.com/ Enlace del Software...

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload POC de Control de Acceso Insuficiente de DNN: la subida de imágenes permite sobrescribir contenido del sitio Soy un hombre sencillo, veo cvss:10/10 y entro xD Vi este nuevo CVE CVE-2025-64095: Control de Acceso Insuficiente de DNN: la...

XSSYA

XSSYA-V2.0 ha sido lanzado - consulta https://github.com/yehia-mamdouh/XSSYA-V-2.0 XSSYA es un Escáner de Cross Site Scripting y Confirmación de Vulnerabilidades Funciona con dos Métodos • Método número 1 para Confirmación de Solicitud y Respuesta • Método número 2 para Confirmación: Ejecutar...