CVE-2023-43343-Quick-CMS-Stored-XSS---Pages-Files

Quick CMS Stored XSS v6.7 Author: Sergio Description: Multiple Cross-Site Scripting XSS vulnerabilities in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the Files - Description in the Pages Menu. Attack Vectors: Scripting A vulnerability in the...

CVE-2023-49974

CVE-2023-49974 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "contact" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious actor...

CVE-2023-44771_ZenarioCMS--Stored-XSS---Page-Layout

ZenarioCMS Stored XSS v.9.4.59197 Author: Sergio Description: Cross Site Scripting vulnerability in ZenarioCMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Page Layout. Attack Vectors: Scripting a vulnerability in the sanitization of the entry in the...

CSZ-CMS-Stored-XSS---Site-Settings

CSZ CMS Stored XSS v1.3.0 Author: Sergio Description: Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additional Meta Tag parameter in the Site Settings Menu. Attack Vectors: Scripting A vulnerability in the...

CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend

Quick CMS Stored XSS v6.7 Author: Sergio Description: A Cross-Site Scripting XSS vulnerability in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the Front and back end - Pages in the Languages Menu. Attack Vectors: Scripting A vulnerability in the...

CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Top Directory in the File Picker Menu. Attack Vectors: Scripting A vulnerability in the...

CVE-2022-25063

CVE-2022-25063 This script exploits a vulnerability XSS in the TPLink WR840N router, using a field for injecting javascript code...

CVE-2020-18325

Multilple Cross Site Scripting XSS vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel. Description Subrion CMS is easy to install and simple to manage. Use it as a stand-alone application or in conjunction with other applications to create entry level sites, mid-siz...

CVE-2026-5615

CVE-2026-5615 — VvvebJs Stored Cross-Site Scripting RXSS Overview This repository contains a Python proof-of-concept PoC script demonstrating a Stored Cross-Site Scripting RXSS vulnerability affecting VvvebJs ⚠️ This project is intended strictly for authorized security testing , educational...

CVE-2024-33209

CVE-2024-33209 FlatPress 1.3. is vulnerable to Cross Site Scripting XSS. An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows them to execute arbitrary code in the context of a victim's web browser. Vulnerability Type: Cross Site Scripting XSS Vendor of...

CVE-2023-49976

CVE-2023-49976 Customer Support System 1.0 - XSS Cross-Site Scripting Vulnerability in the "subject" at "ticketlist" Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious actor can insert JavaScri...

Progress-MOVEit-Transfer-2020.1-Stored-XSS-CVE-2020-28647

Progress MOVEit Transfer 2020.1 Stored XSS CVE-2020-28647 During a recent web application test engagement one of the applications in scope was a MOVEit Transfer 2020 web application. While performing the assessment a Stored Cross-Site Scripting XSS vulnerability was identified. This blog post wil...

CVE-2023-44762_ConcreteCMS-Reflected-XSS---Tags

ConcreteCMS Reflected XSS v.9.2.1 Author: Sergio Description: Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the Tags from Settings - Tags. Attack Vectors: Scripting a vulnerability in the sanitization of the ent...

CVE-2023-44769_ZenarioCMS--Reflected-XSS---Alias

ZenarioCMS Reflected XSS v.9.4.59197 Author: Sergio Description: Cross Site Scripting vulnerability in ZenarioCMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias. Attack Vectors: Scripting a vulnerability in the sanitization of th...

CVE-2023-44766_ConcreteCMS-Stored-XSS---SEO

ConcreteCMS Stored XSS v.9.2.1 Author: Sergio Description: Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Extra from Page Settings. Attack Vectors: Scripting A vulnerability in the sanitization of the...

CVE-2024-48326

CVE-2024-48326 Description: Portabilis i-Educar v2.8.0 is vulnerable to Cross-Site Scripting XSS via the nmreligiao parameter in POST request at /intranet/educarreligiaocad.php and trigged in GET request at /intranet/educarreligiaolst.php?busca=S&nmreligiao=. This allows an unauthenticated remote...

CVE-2023-43346-Quick-CMS-Stored-XSS---Languages-Backend

Quick CMS Stored XSS v6.7 Author: Sergio Description: A Cross-Site Scripting XSS vulnerability in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the Backend - Dashboard in the Languages Menu. Attack Vectors: Scripting A vulnerability in the...

CVE-2023-31703

CVE-2023-31703 — Reflected XSS in eScan Management Console Overview CVE ID: CVE-2023-31703 Vulnerability Type: Reflected Cross-Site Scripting XSS Affected Product: Microworld Technologies eScan Management Console Affected Version: 14.0.1400.2281 Severity: Medium Discovered By: Sahil Ojha Disclosu...

CVE-2023-44758_GDidees-CMS-Stored-XSS---Title

GDidees Stored XSS v3.0 Author: Sergio Description: Cross Site Scripting vulnerability in GDidees v.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Page Title. Attack Vectors: Scripting A vulnerability in the sanitization of the entry in the Page Title allows...

CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Extra in the Content - News Menu. Attack Vectors: Scripting A vulnerability in the sanitization o...