CVE-2026-97224 Excalidraw Imported File restore.ts cross site scripting

A vulnerability was detected in Excalidraw up to 0.18.1. The impacted element is an unknown function of the file packages/excalidraw/data/restore.ts of the component Imported File Handler. Performing a manipulation of the argument customData.generationData.html results in cross site scripting. Th...

CVE-2026-97224

A cross-site scripting (XSS) vulnerability exists in Excalidraw versions up to 0.18.1 . The flaw is located within an unknown function in the packages/excalidraw/data/restore.ts file, specifically affecting the Imported File Handler component. An attacker can achieve remote execution of XSS by ma...

CVE-2023-32961

CVE-2023-32961 This repository is about XSS vulnerability in Wordpress Zotpress Plugin. Component details Component name Zotpress Vulnerable version ≤ 7.3.3 Component slug zotpress Component link https://wordpress.org/plugins/zotpress/ Pre-requisite Unauthenticated Vulenerability details Short...

CVE-2023-29439

CVE-2023-29439 This repository is about XSS vulnerability in Wordpress Foogallery Plugin. Vulenerability details Description In Foogallery 2.2.35 and earlier, the function foogalleryimageeditormodal in foogallery/includes/admin/class-gallery-attachment-modal.php is vulnerable to XSS attack...

CVE-2025-56515

CVE-2025-56515 Cross-Site Scripting XSS Vulnerability in Fiora Chat Application CVE-2025-56515: Cross-Site Scripting XSS Vulnerability in Fiora Chat Application Vulnerability Overview CVE ID : CVE-2025-56515 Vulnerability Type : Cross-Site Scripting XSS Attack Type : Remote Impact : Code Executio...

CVE-2025-56514

CVE-2025-56514: Cross Site Scripting XSS Vulnerability in Fiora Chat Application Overview A Cross Site Scripting XSS vulnerability, identified as CVE-2025-56514 , affects the Fiora chat application version 1.0.0. This vulnerability allows an authenticated user to execute arbitrary JavaScript in t...

CVE-2024-40508

CVE-2024-40508 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMConference.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMConference.asmx function. Vulnerable Product...

CVE-2024-40506

CVE-2024-40506 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMHospitality.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMHospitality.asmx function. Vulnerable Produ...

CVE-2024-40510

CVE-2024-40510 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMCommon.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMCommon.asmx function. Vulnerable Product Version...

CVE-2024-40509

CVE-2024-40509 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMFinDev.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMFinDev.asmx function. Vulnerable Product Version...

Wordpress_xss-CVE-2022-29455

This repository does not have a README...

CVE-2025-63708

CVE-2025-63708 CVE ID: CVE-2025-63708 Assigned: 11-12-2025 Problem Type: CWE-79 Cross-Site Scripting Affected Product: “AI Font Matcher” posted 2025-10-10, nid=18425 Product page: https://www.sourcecodester.com/javascript/18425/ai-font-matcher-using-html-css-and-javascript-source-code.html...

CVE-2025-60654

CVE-2025-60654 - Stored Cross-Site Scripting XSS in Ad Description | ---|--- Researchers| DotAdrien Severity| 7.2 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Software| Script Pag Description...

CVE-2025-45407

CVE-2025-45407 CVE-2025-45407: Multiple XSS Vulnerabilities in DiscoveryNG v6.0.8 Hotfix 2 Discovered by: YallaSec Security Research Team CVE ID: CVE-2025-45407 Date Published: July 2025...

Kentico-Xperience-before-13.0.178---XSS-POC

This repository does not have a README...

CVE-2024-21338-1

CVE-2024-21338 This PoC was developed for the XSS PWN-Day contest. https://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/threads/111240/...

traxss

Traxss Escáner Automatizado de Vulnerabilidades XSS | Escrito en Python3 | Utiliza Selenium Headless Forks DEMO Antecedentes ¡Traxss es un proyecto de Hacktoberfest! Si buscas un lugar para contribuir, siéntete libre. Traxss es un framework automatizado para escanear URLs y páginas web en busca d...

CVE-2025-0133

Description: It is a POC for CVE-2025-0133 that is applicable only to PAN-OS firewall configurations with an enabled GlobalProtect gateway or portal. It checks issue on multiple URLs that accepts from file, with custom thread. You can also set you timeout and get results in a file. Example usage:...

CVE-2023-36158

CVE-2023-36158 Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...

CVE-2022-3546

CVE-2022-3546 https://vulners.com/cve/CVE-2022-3546 A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handle...