CVE-2026-78293

CVE-2026-78293 affects the WordPress plugin WP w3all phpBB (versions ≤ 3.0.6 ), where an unauthenticated Cross Site Scripting (XSS) vulnerability was identified. The issue was discovered by lanlv – HPT Vietnam Corporation and reported via Patchstack. The CVSS 3.1 score is 7.1 (HIGH) with vector A...

CVE-2026-78289 WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...

CVE-2026-78289

CVE-2026-78289 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the CozyStay WordPress theme, affecting versions 1.10.0 and earlier . The vulnerability was discovered by G0053 and carries a CVSS 3.1 base score of 7.1 (HIGH) with a changed scope, requiring user interaction. The at...

EUVD-2026-66945

Unauthenticated Cross Site Scripting XSS in CozyStay = 1.10.0 versions...

CVE-2026-78283 WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Music Player for WooCommerce = 1.8.9 versions...

EUVD-2026-66941

Unauthenticated Cross Site Scripting XSS in Music Player for WooCommerce = 1.8.9 versions...

CVE-2026-78283

CVE-2026-78283 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Music Player for WooCommerce , affecting versions ≤ 1.8.9 . The flaw was discovered by daroo and is scored CVSS 3.1: 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, indicating a ...

CVE-2026-78281 WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-78281

The WordPress plugin CP Media Player (versions

EUVD-2026-66940

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-78273

CVE-2026-78273 affects the Fluent Boards Pro WordPress plugin in versions 2.0.11 and earlier . The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable by a user with subscriber-level privileges. The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L, in...

EUVD-2026-66936

Subscriber Cross Site Scripting XSS in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78273 WordPress Fluent Boards Pro plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in Fluent Boards Pro = 2.0.11 versions...

EUVD-2026-66994

Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...

CVE-2023-2822-demo

CVE-2023-2822-demo Semplice applicazione Flask per implementare una web app intenzionalmente vulnerabile per dimostrare la CVE-2023-2822. Basata sul writeup su https://medium.com/@cyberninja717/reflected-cross-site-scripting-vulnerability-in-ellucian-ethos-identity-cas-logout-page-685bb1675dfb...

CVE-2023-34840

CVE-2023-34840 Erklärung der Schwachstelle Alle Versionen in angular-ui-notification sind anfällig für XSS, da die Bibliothek die vom Benutzer bereitgestellten Eingaben nicht bereinigt. Um diese Bibliothek sicher zu verwenden, wird dringend empfohlen, die an diese Bibliothek übergebenen Parameter...

CVE-2025-57926

Sink: De acordo com o mecanismo do núcleo do WordPress, o XSS é prevenido no conteúdo de posts, mas com este plugin, o conteúdo é codificado e depois decodificado quando renderizado, criando involuntariamente uma vulnerabilidade de XSS." PoC: O payload codificado em base64 é...

cve-2020-11023-scanner

💥 CVE-2020-11023 Scanner: Finden und besiegen Sie XSS, bevor es zu spät ist! 💥 Werden Sie vom Gespenst der Cross-Site-Scripting XSS-Sicherheitslücken in Ihrem JavaScript-Code heimgesucht? Sorgen Sie sich, dass CVE-2020-11023 Ihre Webanwendungen angreifbar macht? Keine Angst mehr! Der CVE-2020-110...

tool-29489

Tool-29489 نظرة عامة 🔍: تُستخدم هذه الأداة لتحديد عناوين URL التي تحتوي على ثغرة CVE-2023-29489. تستخدم الأداة حمولات payloads لتحديد الثغرة. قائمة المساعدة للأداة tool-29489: python main.py help URL inputfile outputfile -h أو --help : لعرض خيارات المساعدة. -u أو --url : لإدخال عنوان URL للفحص. -...

CVE-2023-34599

CVE-2023-34599 In Gibbon v25.0.0 wurden mehrere Cross-Site-Scripting-Schwachstellen XSS identifiziert, die es Angreifern ermöglichen, beliebigen Javascript-Code auszuführen. Proof of Concept Parameter allUsers http://gibbon.local/index.php?q=/modules/Timetable...