CVE-2026-10104-POC

CVE-2026-10104：Product Video Gallery for WooCommerce 存储型跨站脚本漏洞 摘要 详情| 值 ---|--- CVE 编号| CVE-2026-10104 插件| Product Video Gallery for WooCommerce 供应商| TechnoSoft Webs NikHiL Gadhiya 类型| 存储型跨站脚本（Stored Cross-Site Scripting, XSS） CWE| CWE-79 — 网页生成过程中输入未充分中和 CVSS 3.1| 4.4（中危） 受影响版本| ≤ 1.5.1.6 修复版本|...

CVE-2021-45744

CVE-2021-45744 Título del Exploit: Bludit 3.13.1 - Cross Site Scripting Almacenado XSS en el Campo TAGS Autor del Exploit: SANU P.L CVE: CVE-2021-45744 CVSS: 5.4 MEDIO Referencias: https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss...

CVE-2024-40507

CVE-2024-40507 Vulnerabilidad de Cross Site Scripting en openPetra v.2023.02 a través de la función serverMPersonnel.asmx. Descripción : Un usuario no autenticado puede robar las cookies de un usuario autenticado explotando un XSS en openPetra v.2023.02 a través de la función serverMPersonnel.asm...

CVE-2026-51565

CVE-2026-51565 Aviso de seguridad para CVE-2026-51565 Descripción Vulnerabilidad de cross-site scripting XSS en Modules/Docs/DocsController.php en Milk admin =0.9.8 que permite a atacantes remotos inyectar script web o HTML arbitrario a través del parámetro action en una solicitud manipulada...

CVE-2023-46974

CVE-2023-46974 POC Descripción Vulnerabilidad de Cross-Site Scripting en Best Courier Management System v.1.000 permite a un atacante remoto ejecutar código arbitrario a través de un payload manipulado en el parámetro page de la URL. Tipo de Vulnerabilidad Cross-Site Scripting XSS Proveedor del...

CVE-2026-90615

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed...

CVE-2026-90615 SourceCodester Class and Exam Timetabling System subject1.php cross site scripting

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed...

CVE-2026-90615

CVE-2026-90615 affects SourceCodester Class and Exam Timetabling System 1.0 . The vulnerability is a cross-site scripting (XSS) flaw in the file /subject1.php, triggered by manipulation of the subject argument. The attack is executable remotely and requires user interaction but no authentication....

CVE-2026-36226

CVE-2026-36226: Prueba de Concepto XSS de Crear Nuevo Usuario de Proyecto en Advantech WebAccess/SCADA Este repositorio contiene una prueba de concepto benigna para CVE-2026-36226, un problema de cross-site scripting en Advantech WebAccess/SCADA 8.0-2015.08.16. Este repositorio es solo para...

EUVD-2026-77131

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The...

CVE-2026-90604

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. This affects an unknown part of the component Anchor Tag Handler. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and ma...

CVE-2025-63842

A Cross-Site Scripting XSS vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field...

CVE-2023-28148

A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...

CVE-2023-28148

Paessler PRTG Network Monitoring is affected by a bodyclass Cross-Site Scripting (XSS) vulnerability in versions prior to 23.3.86.1520 . The vulnerability allows an attacker to inject scripts via the body class parameter, with a CVSS 3.1 score of 7.2 (HIGH) (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N), ...

RHEL 9 : grafana-pcp (RHSA-2026:67160)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:67160 advisory. The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and...

CVE-2023-51769

Frappe before 14.49.0 is vulnerable to a Cross-Site Scripting (XSS) attack that affects blog pages and exception pages . The CVSS 3.1 score is 6.1 (MEDIUM) , with a network attack vector, low complexity, no privileges required, but user interaction required , and a changed scope leading to low im...

CVE-2023-51769

Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages...

CVE-2024-23176

CVE-2024-23176 is a cross-site scripting (XSS) vulnerability in the MassMessage extension of MediaWiki versions before 1.40.2 . The root cause is that the i18n key massmessage-form-page-help fails to sanitize user-supplied input passed via the uselang parameter in a Special:MassMessage URL (e.g.,...

PT-2026-91025

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed...

PT-2026-91179

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache Syncope. The notification message, as optionally shown by Console's and Enduser's login pages can be instructed to display HTML tags with unsafe JS inline, via malicious HTTP link generation...