CVE-2023-51802

CVE-2023-51802 Simple Student Attendance System v.1.0 - attendancereport में क्रॉस-साइट स्क्रिप्टिंग XSS कमजोरियाँ विवरण : Simple Student Attendance System v.1.0 में क्रॉस साइट स्क्रिप्टिंग कमजोरी एक दूरस्थ हमलावर को attendancereport घटक में "page" या "classmonth" पैरामीटर में एक क्राफ्टेड पेलोड ...

CVE-2023-49540

CVE-2023-49540 Book Store Management System v1.0 - Vulnerabilità Cross-site scripting XSS in /index.php/history - campo vulnerabile: "Customer's Name". Descrizione : è stato scoperto che Book Store Management System v1.0 contiene una vulnerabilità cross-site scripting XSS in...

WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Aydan Arabadzha in WordPress Plugin Realtyna Organic IDX plugin versions = 5.4.1...

WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin CP Media Player versions = 1.3.0...

WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by G0053 in WordPress Theme CozyStay versions = 1.10.0...

CVE-2024-4367-POC-PDFJS

CVE 2024 4367: PoC per lo sfruttamento di XSS Cross-Site Scripting 1. Visualizzazione di un Avviso Attivazione XSS Un altro esempio di sfruttamento consiste nell'iniettare un semplice messaggio di avviso per verificare se l'attacco funziona. root@kitploit: python poc.py "alert'XSS exploit...

Leantime-POC

Leantime-POC CVE-2024-27474, CVE-2024-27476, CVE-2024-27477 विवरण Leantime लक्ष्य-केंद्रित परियोजना प्रबंधन प्रणाली के संस्करण 3.0.6 में निम्नलिखित कमजोरियों की पहचान की गई थी। CVE-2024-27474 एक क्रॉस-साइट अनुरोध जालसाज़ी CSRF कमजोरी, जो ट्रिगर होने पर, एक खाता बनाकर उसके विशेषाधिकारों को...

CVE-2025-51401

Exploit-Titel: LiveHelperChat =4.61 - Gespeichertes Cross-Site-Scripting XSS über das Operator-Chat-Namensfeld löst bei Übergabe des Chat-Besitzers aus Datum: 09/06/2025 Exploit-Autor: Manojkumar J TheWhiteEvil Linkedin: https://www.linkedin.com/in/manojkumar-j-7ba35b202/ Hersteller-Webseite:...

CVE-2025-70368

CVE-2025-70368 Vulnerabilidade de Cross-Site Scripting XSS Armazenado na Funcionalidade de Atualizações de Projeto...

CVE-2024-55060

CVE-2024-55060 Rafed CMS Website v1.44 - Cross Site Scripting XSS Titolo dell'exploit: Rafed CMS Website v1.44 - Cross Site Scripting XSS Data: 2024-03-12 CVE: CVE-2024-55060 Autore dell'exploit: Abdulaziz Saad @b4zb0z Homepage del fornitore: https://www.rafed-system.org/ Link del software: N/A...

CVE-2002-0346

CVE-2002-0346 Vulnerabilità di cross-site scripting in Cobalt RAQ 4 consente a un attaccante remoto di eseguire script arbitrari come altri utenti Cobalt tramite Javascript in un URL verso 1 service.cgi o 2 alert.cgi. Pubblicazione Packetstorm su...

CVE-2022-36432

CVE-2022-36432 Cross-site Scripting XSS nella funzionalità di anteprima in Amasty Blog Pro per Magento 2 Descrizione La funzionalità di anteprima nel plugin Amasty Blog Pro 2.10.3 per Magento 2 utilizza eval in modo non sicuro. Ciò consente agli aggressori di effettuare attacchi Cross-site...

WordPress Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 700+ Patterns, 58 Blocks & Templates plugin <= 2.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Cozy Blocks versions = 2.2.16...

CVE-2026-56704

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2021-39475

CVE-2021-39475 XSS auf der Admin-Bewertungsseite https://www.warcloudsecurity.com/ecommerce/admin/reviews.php?action=preview&rID=1&page=0...

CVE-2022-33075

CVE-2022-33075 Título do Exploit: Zoo Management System 1.0 - Cross-Site-Scripting XSS Armazenado Data: 26/05/2022 Autor do Exploit: Angelo Pio Amirante Homepage do Fornecedor: https://www.sourcecodester.com/ Link do Software:...

EUVD-2026-65202

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...

CVE-2026-56704

Adminer versions before 5.4.3 are vulnerable to cross-site scripting (XSS) caused by unsanitized database server version strings being inserted into [removed] tags that carry valid CSP nonces. An attacker who controls a rogue MySQL server can return a crafted version string that breaks out of the...

CVE-2026-56704 Adminer before 5.4.3 Cross-Site Scripting via MySQL Version String

Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling a rogue MySQL server can return crafted version strings that break out of the JavaScript context and execute arbitrary code, bypassing...