Lucene search
K

178 matches found

OSV
OSV
added 2026/04/07 6:31 p.m.0 views

GHSA-PQ95-94C9-J987 yaffa vulnerable to Cross Site Scripting

yaffa v2.0.0 is vulnerable to Cross Site Scripting XSS. An attacker can inject malicious JavaScript into the "Add Account Group" function on the account-group page, allowing execution of arbitrary script in the context of users who view the affected page...

6.1CVSS6.1AI score0.00014EPSS
Exploits0References3
Veracode
Veracode
added 2026/03/18 6:44 a.m.3 views

Cross-Site Scripting (XSS)

code.gitea.io/gitea is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of user input in the search input box used for creating tags and branches, where v-html is used instead of v-text, which allows an attacker to inject and execute malicious scripts in the...

5.4CVSS7.4AI score0.00007EPSS
Exploits0References4Affected Software1
EUVD
EUVD
added 2026/03/11 12:23 a.m.1 views

EUVD-2026-10977

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.8AI score0.00041EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/11 12:23 a.m.1 views

EUVD-2026-10970

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

5.4CVSS5.8AI score0.00041EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:30 a.m.4 views

CVE-2023-29043

Presentations may contain references to images, which are user-controlled, and could include malicious script code that is being processed when editing a document. Script code embedded in malicious documents could be executed in the context of the user editing the document when performing certain...

6.1CVSS6.9AI score0.0012EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.0 views

Kentico Xperience 跨站脚本漏洞

Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject malicious script via the rich text editor component of the page and form builder...

6.1CVSS5.6AI score0.00024EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/17 10:16 p.m.4 views

CVE-2025-68147 opensourcepos has a Cross-site Scripting vulnerability

Open Source Point of Sale opensourcepos is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Stored Cross-Site Scripting XSS vulnerability exists in the "Return Policy" configuration field. The application doe...

8.1CVSS5AI score0.00047EPSS
Exploits4References3
RedhatCVE
RedhatCVE
added 2025/12/11 7:1 p.m.1 views

CVE-2025-64873

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5.6AI score0.00025EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/10 9:31 p.m.1 views

EUVD-2025-202565

Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

5.4CVSS5AI score0.00025EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.2 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.7AI score0.00025EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.0 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The solution supports mobile content management, marketing and sales campaign management, and multi-site management. A...

5.4CVSS5.8AI score0.00025EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.2 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The solution supports mobile content management, marketing and sales campaign management, and multi-site management. A...

5.4CVSS5.8AI score0.00025EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.1 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.8AI score0.00025EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.1 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The solution supports mobile content management, marketing and sales campaign management, and multi-site management. A...

5.4CVSS5.8AI score0.00025EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.1 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The solution supports mobile content management, marketing and sales campaign management, and multi-site management. A...

5.4CVSS5.7AI score0.00025EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.1 views

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

5.4CVSS5.9AI score0.00025EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/24 11:27 a.m.5 views

CVE-2025-41087 Cross-Site Scripting (XSS) stored in Taclia's web application

Cross-Site Scripting XSS vulnerability stored in tha Taclia web application, where the uploaded SVG images are not properly sanitized. This allows to the attackers to embed malicious scripts in SVG files such as image profiles, which are then stored on the server and executed in the context of an...

5.1CVSS0.00054EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-13053

Malware in sbrugna...

4.8CVSS5.1AI score0.00148EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2016-7729

Malware in sbrugna...

6.1CVSS6.3AI score0.00265EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-5048

Malware in sbrugna...

6.1CVSS6.3AI score0.00211EPSS
Exploits1References3
Rows per page
Query Builder