Lucene search
K

7 matches found

OSV
OSV
added 2026/02/27 12:16 p.m.5 views

UBUNTU-CVE-2026-24351

PluXml CMS is vulnerable to Stored XSS in Static Pages editing functionality. Attacker with editing privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page. The vendor was notified early about this vulnerability, but didn't respond with...

5.4CVSS5.9AI score0.00177EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/27 11:35 a.m.8 views

CVE-2026-24351

PluXml CMS is vulnerable to Stored XSS in Static Pages editing functionality. Attacker with editing privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when visiting edited page. The vendor was notified early about this vulnerability, but didn't respond with...

5.4CVSS6AI score0.00177EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/02/27 11:35 a.m.11 views

CVE-2026-24351

PluXml CMS is affected by CVE-2026-24351 (Stored XSS in Static Pages editing). An attacker with editing privileges can inject arbitrary HTML/JS that is rendered when visiting the edited page. Vulnerable confirmed in versions 5.8.21 and 5.9.0-rc7; other versions were not tested and might also be v...

5.4CVSS6AI score0.00177EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-16215

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00618EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/05/28 12:0 a.m.3 views

PT-2025-23091 · Tenda · Tenda W18E

Name of the Vulnerable Software and Affected Versions: Tenda W18E version 2.0 v.16.01.0.11 Description: An issue in Tenda W18E allows an attacker to execute arbitrary code via the editing functionality of the account module in the "goform/setmodules" route. Recommendations: For Tenda W18E version...

10CVSS7.2AI score0.00618EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2025/05/15 12:0 a.m.4 views

PT-2025-21281 · Unknown · Phpgurukul Vehicle Record Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul Vehicle Record Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via Cross Site Scripting XSS in the vehiclename, modelnumber, regnumber, vehiclesubtype, chasisnum, and enginenumber...

6.1CVSS5.8AI score0.00233EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/09 12:0 a.m.3 views

The vulnerability of PDF-XChange Editor’s document viewing and editing software lies in the possibility of an operation going beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory when processing JPG files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.0034EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder