CVE-2026-62082

The Pin WP WordPress theme in versions

CVE-2026-62064 WordPress Ambed theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ambed = 1.0.0 versions...

CVE-2026-62064

The Ambed WordPress theme (versions

CVE-2026-42702

The Tutor LMS WordPress plugin in versions

CVE-2026-42699

The WordPress FV Player 8 plugin (versions

CVE-2026-42702 WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Tutor LMS = 4.1.0 versions...

CVE-2026-42631

The Qode Music WordPress plugin (versions

CVE-2024-33210

CVE-2024-33210 A cross-site scripting XSS vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by other users. Vulnerability Type: Cross Site Scripting XSS Vendor of Product: flatpress CMS Affected Product Code...

CVE-2024-24136

CVE-2024-24136 : Math Game Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24136.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24136/blob/main/CVE-2024-24136.md...

CVE-2024-40511

CVE-2024-40511 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMServerAdmin.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMServerAdmin.asmx function. Vulnerable Produ...

CVE-2024-48591

CVE-2024-48591 Vulnerability Disclosure: XSS in Inflectra SpiraTeam 7.2.00 Description Inflectra SpiraTeam version 7.2.00 is vulnerable to Cross-Site Scripting XSS through the upload of specially crafted SVG files, which can execute JavaScript when viewed directly. Vulnerability Type Cross-Site...

CVE-2022-38553

CVE-2022-38553 CROSS SITE SCRIPTING XSS ON "ACADEMY LEARNING MANAGEMENT SYSTEM" POC VIDEO: Security Risk: This security vulnerability allows to execute arbitrary JavaScript code in user browser if they access URL prepared by attackers...

CVE-2024-25202

CVE-2024-25202 A vulnerability was found in PHPgurukul visitor management system 1.0. it has been rated as problemic. Affected by the issue is some unknown functionality of the file search bar that called search-result.php and search-visitor.php . The vulnerability is Cross-Site-Scripting XSS...

CVE-2024-24134

CVE-2024-24134 : Online Food Menu - Cross-Site-Scripting Proof of ConceptPoc : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24134.md Proof of ConceptPoc : https://github.com/BurakSevben/CVE-2024-24134/blob/main/CVE-2024-24134.md...

CVE-2019-12541

CVE-2019-12541 Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability in SolutionSearch.do Information Description: An issue was discovered in Zoho ManageEngine ServiceDesk Plus 9.3. There is XSS via the SolutionSearch.do searchText parameter. Author: Concobe of Tarantula Team - VinCSS a member...

CVE-2024-22890

CVE-2024-22890: My e-Diary App - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-22890/blob/main/CVE-2024-22890.md...

CVE-2020-13965

CVE-2020-13965: Cross-Site Scripting via Malicious XML Attachment in Roundcube Webmail A Cross-Site scripting XSS vulnerability exists in Roundcube versions before 1.4.5 and 1.3.12. By leveraging the parsing of "text/xml" attachment, an attacker can bypass the Roundcube script filter and execute...

CVE-2023-30943

CVE-2023-30943Moodle self-xss Disclaimer All content is provided "as is", without any warranties, express or implied. The authors shall not be liable for any damages, direct or indirect, arising from the use of the information or software associated with this repository. All material, including...

CVE-2024-23997

YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulnerability. 1. Vunerability Overview: Vulnerability Subject: Local Code Excution via XSS Vulnerability Version: = 1.0.16 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, we must intercept an HTTP packet...

CVE-2024-51026_Overview

CVE-2024-51026 - Cross Site Scripting XSS Vulnerability in NetAdmin IAM Description The NetAdmin IAM system version 4.0.30319 presents a Cross Site Scripting XSS vulnerability in the /BalloonSave.ashx endpoint, where it is possible to inject a malicious payload in the Content= field. Any...