CVE-2021-30146

CVE-2021-30146 Seafile 7.0.5 XSS Persistente Descripción sugerida: La aplicación versión del servidor: Seafile 7.0.5 es vulnerable a XSS persistente a través de la funcionalidad de compartir bibliotecas. Información adicional: Seafile es una solución de sincronización y uso compartido de archivos...

CVE-2025-70600---Urve-Smart-Office---Stored-XSS-in-iOS-App

URVE Smart Office iOS — 通过磁贴HTML字段存储型XSS（PoC） 此仓库记录了一个概念验证（PoC） ，针对影响URVE Smart Office 的iOS移动应用 的存储型跨站脚本（XSS）漏洞 。 由于输入验证实现不足，攻击者控制的JavaScript可以被注入到磁贴的HTML字段 中。有效载荷被存储，并在受影响内容传递至移动客户端并在iOS设备上渲染时执行。 ⚠️ 法律免责声明 未经双方事先同意，使用此PoC攻击目标是违法的。 最终用户有责任遵守所有适用的地方、州和联邦法律。 作者和贡献者对任何滥用或造成的损害不承担责任。 CVE 详情 CVE ID:...

CVE-2025-44148

CVE-2025-44148 - 反射型跨站脚本（Reflected XSS） MailEnable 中的反射型跨站脚本（XSS） 厂商：MailEnable Pty. Ltd. 受影响版本：10 描述 由于 failure.aspx 中对用户输入清理不当，MailEnable Webmail 存在反射型跨站脚本（XSS）漏洞。远程攻击者可通过构造的 URL 注入任意 JavaScript 代码，该代码随后在服务器响应中反射，并在用户浏览器会话上下文中执行。 POC 访问 /Mondo/lang/sys/Failure.aspx?state=19753 页面 使用...

CVE-2021-38149

CVE-2021-38149 Chikitsa Patient Management System 2.0.0 存储型跨站脚本（XSS） 在 Chikitsa Patient Management System 2.0.0 版本的多个页面中存在一个存储型跨站脚本（XSS）实例，该漏洞允许在用户浏览器中执行任意 JavaScript，从而可能使用户提升权限。 受影响页面： /index.php/admin/adduser /index.php/appointment/todos...

CVE-2026-34621

CVE-2026-34621 : Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain — PoC de investigación Resumen Este repositorio contiene material de investigación y código de prueba de concepto desarrollado durante el análisis de la cadena de explotación "in-the-wild" de Adobe Acrobat Reader 2026 qu...

uxss-poc

PoC Universal de Cross Site Scripting Este es un PoC para CVE-2015-0072 para obtener secuencialmente las cookies de los sitios web objetivo. Descargo de responsabilidad Este PoC tiene fines educativos únicamente. No lo utilices contra ningún sistema sin permiso previo. Eres responsable de lo que...

CVE-2019-10685

CVE-2019-10685 La entrada proporcionada por el usuario que contiene JavaScript se refleja en código JavaScript en una respuesta HTML a través del parámetro "TextField". Publicación de Exploit-DB en https://www.exploit-db.com/exploits/46804 Publicación de PacketStorm en...

KodExplorer - Cross-Site Scripting

KodExplorer is susceptible to a reflected cross-site scripting XSS vulnerability in the file view functionality.The vulnerability exists in app/template/api/view.html where user-supplied input in the 'path' parameter is directly echoed without proper sanitization.This allows attackers to inject...

XWiki >= 3.4-milestone-1 - Cross-Site Scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the deletespace template to perform a XSS, e.g. by using URL such as:...

Limit Login Attempts - Stored Cross-Site Scripting

Limit Login Attempts WordPress plugin 4.0.72 contains a stored cross-site scripting caused by unsanitized and unescaped settings, letting malicious administrators inject Javascript code, exploit requires administrator privileges. id: CVE-2022-1029 info: name: Limit Login Attempts - Stored...

Mailcow Dockerized Swagger UI - Cross-Site Scripting

Mailcow-dockerized before 2022-09a uses a vulnerable version of Swagger UI before 4.11.1 that is affected by a DOM-based Cross-Site Scripting XSS vulnerability. When a user accesses the Swagger documentation with a crafted configUrl or url parameter containing JavaScript payloads, arbitrary code...

CVE-2025-45960

CVE-2025-45960 - tawk.to Live chat - 1.6.1 - Cross-Site Scripting XSS Vulnerabilidad Confirmado en 1.6.1 versiones anteriores probablemente afectadas Descripción: Se encontró que la aplicación web almacena y muestra datos proporcionados por el usuario sin la validación o codificación adecuada. Es...

EUVD-2025-211052

The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user supplied data. The lack of sanitization allows for the injection of HTML which can be used to execute malicious JavaScript code on any target browser which renders the device log...

CVE-2024-34452

CVE-2024-34452 - Vulnerabilidad de Cross-Site Scripting XSS en CMSimpleXH Resumen Se ha identificado una vulnerabilidad de cross-site scripting XSS en CMSimpleXH versión 1.7.6. Esta vulnerabilidad permite a usuarios autorizados subir archivos SVG que contienen código JavaScript malicioso. El...

CVE-2023-34599

CVE-2023-34599 Se han identificado múltiples vulnerabilidades de Cross-Site Scripting XSS en Gibbon v25.0.0, que permiten a atacantes ejecutar código Javascript arbitrario. Prueba de Concepto Parámetro allUsers http://gibbon.local/index.php?q=/modules/Timetable...

CVE-2022-36433

CVE-2022-36433 Amasty Blog Pro for Magento 2 中博客文章创建功能的跨站脚本（XSS） 描述 Amasty Blog Pro 2.10.3 插件（适用于 Magento 2）的博客文章创建功能允许在 shortcontent 和 fullcontent 字段中注入 JavaScript 代码，导致管理面板用户通过 posts/preview 或 posts/save 受到 XSS 攻击。 以下是上述参数的易受攻击端点（注入点）： POST /admin/amastyblog/posts/preview/key/somekey/?isAjax=tr...

CVE-2026-106446

Handlebars versions 4.0.0 through 4.7.10 are vulnerable to JavaScript Injection due to AST Type Confusion in the compile() and precompile() functions. The root cause is that the compiler validates only a subset of AST values (PathExpression, NumberLiteral, and BooleanLiteral), allowing an attacke...

CVE-2026-106446 Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile and Handlebars.precompile accept pre-parsed AST objects while validating only selected PathExpression, NumberLiteral, and BooleanLiteral values. This issue bypasses the AST...

CVE-2026-106445 Handlebars: JavaScript Injection via Own Property Check Bypass

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor is an own property of Function.prototype. When an attacker ca...

CVE-2026-106445

The Handlebars template engine is vulnerable to JavaScript Injection in versions 4.0.0 through 4.7.10 . The root cause is an own property check bypass in the lookupProperty function, which returns Function.prototype.constructor before applying the prototype-access deny list. If an attacker can re...