CVE-2026-81926

Concrete CMS versions 9.4.0 through 9.5.2 are affected by a cross-site scripting (XSS) vulnerability in the location panel's duplicate-path confirmation dialog . The panel's check endpoint returned the submitted page path unmodified in its JSON response, and client-side JavaScript inserted each v...

MD Webmarketing Cross Site Scripting / SQL Injection

Exploit Title : MD-WEBMARKETING - SQL Injection/Cross Site Scripting Vulnerabilities Date : 06-11-2012 Author : Caleb Bucker Independent Security Researcher Contact : https://twitter.com/CalebDrugs Website : www.calebbucker.blogspot.com Vendor : MD Webmarketing URL Vendor :...