Lucene search
+L

1437 matches found

RedhatCVE
RedhatCVE
•added 2025/11/08 12:55 a.m.•22 views

CVE-2025-63639

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...

6.1CVSS5.9AI score0.00225EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/07 9:31 p.m.•16 views

EUVD-2025-38296

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...

5.4AI score0.00225EPSS
SaveExploits1References3
OSV
OSV
•added 2025/11/07 8:15 p.m.•18 views

CVE-2025-63639

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...

6.1CVSS5.8AI score0.00225EPSS
SaveExploits1References2
NVD
NVD
•added 2025/11/07 8:15 p.m.•16 views

CVE-2025-63639

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...

6.1CVSS0.00225EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/11/07 12:00 a.m.•16 views

SourceCodester FAQ Bot with AI Assistant 安全漏洞

SourceCodester FAQ Bot with AI Assistant is an open source question and answer bot with artificial intelligence assistant by SourceCodester. A security vulnerability exists in SourceCodester FAQ Bot with AI Assistant v1.0, which stems from improper handling of user-supplied input and could lead t...

6.1CVSS6AI score0.00225EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/07 12:00 a.m.•37 views

CVE-2025-63639

The Sourcecodester FAQ Bot with AI Assistant v1.0 contains a Cross-Site Scripting (XSS) vulnerability within its chat feature. The root cause is the improper handling of user-supplied input , which allows an attacker to inject malicious HTML or JavaScript into chat messages. This code executes in...

5.5AI score0.00225EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/07 12:00 a.m.•19 views

PT-2025-45496

Name of the Vulnerable Software and Affected Versions Sourcecodester FAQ Bot with AI Assistant version 1.0 Description The application’s chat feature is susceptible to Cross-Site Scripting XSS because of inadequate handling of user-provided input. An attacker can inject malicious HTML or JavaScri...

6.3AI score0.00225EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/07 12:00 a.m.•0 views

CVE-2025-63639: Improper Neutralization of Input During Web Page Generation

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...

6.1CVSS5.8AI score0.00225EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/02 5:44 a.m.•29 views

CVE-2025-11502

The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'saswptinymultiplefaq' shortcode in all versions up to, and including, 1.51 due to insufficient input sanitization and output escaping on user supplied attributes. This mak...

6.4CVSS5AI score0.00216EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/01 12:00 a.m.•23 views

PT-2025-44708

Name of the Vulnerable Software and Affected Versions Schema & Structured Data for WP & AMP plugin for WordPress versions through 1.51 Description The Schema & Structured Data for WP & AMP plugin for WordPress has a Stored Cross-Site Scripting issue related to the 'saswp tiny multiple faq'...

6.4CVSS5.5AI score0.00216EPSS
SaveExploits0References9
Patchstack
Patchstack
•added 2025/10/24 1:22 a.m.•14 views

WordPress Advanced FAQ Manager plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Advanced FAQ Manager versions = 1.5.2...

6.5CVSS6.1AI score0.00196EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2007-4193

Malware in sbrugna...

7.5CVSS6.4AI score0.02944EPSS
SaveExploits4References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2007-1612

Malware in sbrugna...

7.5CVSS6.4AI score0.0105EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2008-2686

Malware in sbrugna...

7.5CVSS6.4AI score0.0101EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2020-7254

Malware in sbrugna...

5.3CVSS6.4AI score0.01013EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2012-1656

Malware in sbrugna...

4.3CVSS6.4AI score0.02388EPSS
SaveExploits0References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2006-2881

Malware in sbrugna...

7.5CVSS6.4AI score0.01291EPSS
SaveExploits2References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2008-4091

Malware in sbrugna...

7.2CVSS6.2AI score0.00379EPSS
SaveExploits0References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2002-0227

Malware in sbrugna...

5CVSS6.1AI score0.07702EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2010-3210

Malware in sbrugna...

7.5CVSS6.4AI score0.00961EPSS
SaveExploits2References4
Rows per page
Query Builder