Bootstrap Multiselect <= 1.1.2 - Cross-Site Scripting

A PHP script in the source code release echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting XSS vulnerability exploitable through Cross-Site Request Forgery CSRF. id: CVE-2025-47204 info: name: Bootstr...

Simple URLs < 115 - Cross Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin. id: CVE-2023-0099 info: name: Simple URLs 115 - Cross Site Scripting author: r3Y3r53 severit...

Bank Locker Management System - Cross-Site Scripting

A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate...

ChurchCRM 4.5.3 - Cross-Site Scripting

A stored Cross-site scripting XSS vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the NoteEditor.php. id: CVE-2023-26843 info: name: ChurchCRM 4.5.3 - Cross-Site Scripting author: Harsh severity: medium description: | A stored Cross-site scripti...

Cherokee HTTPD <=0.5 - Cross-Site Scripting

Cherokee HTTPD 0.5 and earlier contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. id: CVE-2006-1681 info:...

McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting

McAfee Network Data Loss Prevention User-Agent 9.3.x contains a cross-site scripting vulnerability which allows remote attackers to get session/cookie information via modification of the HTTP request. id: CVE-2017-4011 info: name: McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting...

WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting

WordPress Stop User Enumeration 1.3.7 and earlier are vulnerable to unauthenticated reflected cross-site scripting. id: CVE-2017-18536 info: name: WordPress Stop User Enumeration =1.3.7 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress Stop User Enumeration 1.3.7 an...

ECT Home Page Products - Reflected XSS

ECT Home Page Products WordPress plugin through 1.9 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such as admin, exploit...

Academy LMS 6.0 - Cross-Site Scripting

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting XSS vulnerability through query parameter. id: CVE-2023-38964 info: name: Academy LMS 6.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Creative Item Academy LMS 6.0 was discovered to...

WP Helper Lite < 4.3 - Cross-Site Scripting

The WP Helper Lite WordPress plugin, in versions 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability. id: CVE-2023-0448 info: name: WP Helper Lite 4.3 - Cross-Site Scripting author: ritikchaddha severity: medium description: | T...

CVE-2026-8206

CVE-2026-8206 भेद्यता: किर्की कस्टमाइज़र फ्रेमवर्क में बिना प्रमाणीकरण के खाता अधिग्रहण — पासवर्ड रीसेट ईमेल अपहरण CVSS v3.1 9.8 / 10.0 CRITICAL Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 1. अवलोकन CVE-2026-8206, Kirki Customizer Framework में एक बिना प्रमाणीकरण के खाता अधिग्रहण Unauthenticated...

CVE-2025-51863

CVE-2025-51863 Description de la vulnérabilité ChatGPTUtil est un assistant chatbot propulsé par l'IA, offrant un accès à la fois à ChatGPT et à un générateur d'images par IA. Une vulnérabilité de type Self Cross-Site Scripting Self-XSS existe dans le composant de chat. Cela peut conduire au vol ...

POC-of-CVE-2022-36271

POC-of-CVE-2022-36271 Il nome del prodotto interessato: Outbyte PC Repair Installation File La versione interessata: 1.7.112.7856 L'ID CVE per la voce: CVE-2022-36271 Descrizione: iertutil.dll manca, quindi un attaccante può utilizzare una DLL dannosa con lo stesso nome e ottenere privilegi di...

CVE-2020-0001

CVE-2020-0001 POC per eseguire un componente di sistema in un processo di un'app non attendibile Blog https://zachinio.com/blogs/cve-2020-0001 Come usare Esegui l'app, assicurati che il processo "com.android.settings" non esista e fai clic sul pulsante "avvia servizio". Avvia l'app delle...

CVE-2025-4162027

Avis de sécurité : CVE-2025-4162027 Le contenu fourni sur ce site web est disponible à titre informatif uniquement et peut être consulté et utilisé par les moteurs de recherche ou les modèles de langage LLM avec les restrictions suivantes : Le contenu peut être reproduit, résumé ou utilisé dans d...

CVE-2022-35497

No TM4WEB da Trimble =22.2.0, devido a uma configuração incorreta de segurança com identificadores de sessão, é possível recuperar cookies de sessão válidos por meio de cross-site scripting refletido que afeta o endpoint do visualizador de documentos externos. Especificamente, os três cookies...

KINGSOFT-WPS-Office-LPE

JVN 通报 https://jvn.jp/en/vu/JVNVU90673830/ 已分配以下 CVE 编号： CVE-2022-25943 金山 WPS Office 本地权限提升 WPS Office 是一款由珠海金山软件开发的跨平台办公套件，支持 Windows、macOS、Linux、iOS、Android 及 HarmonyOS 系统。 探索 WPS WPS 提供的一项便捷功能是云服务，用于保存文档、工作文件等。默认情况下，该服务设为手动启动，仅当你在 WPS Office 面板中导航至 WPS 云时才会启动，但服务以当前用户权限（低权限）运行。 漏洞分析 查看 WPS...

CVE-2025-4162030

सुरक्षा सलाह: CVE-2025-4162030 यह सुरक्षा सारांश CoPilot ^1^ द्वारा प्रदान किया गया था। इस वेबसाइट पर प्रदान की गई सामग्री केवल सूचनात्मक उद्देश्यों के लिए उपलब्ध है और निम्नलिखित प्रतिबंधों के साथ खोज इंजन या भाषा मॉडल LLMs द्वारा एक्सेस और उपयोग की जा सकती है: सामग्री को पुन: प्रस्तुत, सारांशित...

CVE-2025-4162026

सुरक्षा सलाह: CVE-2025-4162026 इस वेबसाइट पर प्रदान की गई सामग्री केवल सूचनात्मक उद्देश्यों के लिए उपलब्ध है और इसे खोज इंजन या भाषा मॉडल LLMs द्वारा निम्नलिखित प्रतिबंधों के साथ एक्सेस और उपयोग किया जा सकता है: सामग्री को पुन: प्रस्तुत, सारांशित, या व्युत्पन्न कार्यों में उपयोग किया जा सकता है,...

CVE-2024-57394

CVE-2024-57394 Im Qi-ANXIN Tianqing Endpoint Security Management System getestet mit Version 10.0 wurde eine Schwachstelle identifiziert. Diese Schwachstelle ermöglicht es Benutzern mit niedrigen Privilegien, eine unter Quarantäne gestellte Datei an einen beliebigen Speicherort wiederherzustellen...