Lucene search
+L

6 matches found

Cvelist
Cvelist
•added 2026/06/04 1:22 p.m.•56 views

CVE-2019-25731 Zuz Music 2.1 Persistent Cross-site Scripting via zuzconsole Contact

Zuz Music 2.1 contains a persistent cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious JavaScript by submitting crafted contact form data. Attackers can inject script code through the name, subject, and message parameters in POST requests to...

6.1CVSS0.00211EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/11/13 12:30 a.m.•11 views

EUVD-2025-150400

A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the application's message system. Unsanitized message content submitted by one user is persisted by the server and later rendered in another user's Inbox view without appropriate context-aware...

5.4CVSS5.1AI score0.00201EPSS
SaveExploits1References3
Snyk
Snyk
•added 2025/11/12 9:43 p.m.•3 views

Cross-site Scripting (XSS)

Overview ph7software/ph7builder is a pH7Builder. Social Dating Web App Site Builder Affected versions of this package are vulnerable to Cross-site Scripting XSS via the message content field in the application's messaging system. An attacker can execute arbitrary scripts in the context of another...

5.4CVSS5.3AI score0.00201EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•1 views

CVE-2025-63645: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the application's message system. Unsanitized message content submitted by one user is persisted by the server and later rendered in another user's Inbox view without appropriate context-aware...

5.4CVSS5.7AI score0.00201EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/12 12:00 a.m.•20 views

CVE-2025-63645

A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS version 17.9.1 within the application's message system . The root cause is the failure to sanitize and apply context-aware encoding to the message content field before it is persisted by the server and s...

5.2AI score0.00201EPSS
SaveExploits1References2Affected Software1
Exploit DB
Exploit DB
•added 2009/02/23 12:00 a.m.•46 views

Optus/Huawei E960 HSDPA Router - Sms Cross-Site Scripting

XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router firmware version 246.11.04.11.110sp04 is vulnerable to XSS attack using SMS. One of the feature of this router is the ability to send and receive SMS through its web interface. The SMS text is...

5.8AI score
SaveExploits0
Rows per page
Query Builder