CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

839 matches found

EUVD•added 2025/10/06 6:31 p.m.•7 views

EUVD-2025-32559

A stored Cross-site scripting XSS vulnerability exists in the Customer Management Module of LionCoders SalePro POS 5.4.8. An authenticated attacker can inject arbitrary web script or HTML via the 'Customer Name' parameter when creating or editing customer profiles. This malicious input is...

6.1CVSS5.3AI score0.00223EPSS

SaveExploits0References3

OSV•added 2025/10/06 6:15 p.m.•5 views

CVE-2025-56382

6.1CVSS6AI score0.00223EPSS

SaveExploits0References2

NVD•added 2025/10/06 6:15 p.m.•7 views

CVE-2025-56382

6.1CVSS0.00223EPSS

SaveExploits0References2

Vulnrichment•added 2025/10/06 12:0 a.m.•5 views

CVE-2025-56382

5.4AI score0.00223EPSS

SaveExploits0References2

Positive Technologies•added 2025/10/06 12:0 a.m.•10 views

PT-2025-40921

Name of the Vulnerable Software and Affected Versions LionCoders SalePro POS version 5.4.8 Description A stored Cross-site scripting XSS issue exists within the Customer Management Module. An authenticated attacker can inject arbitrary web script or HTML through the Customer Name parameter during...

6.1CVSS5.7AI score0.00223EPSS

SaveExploits0References6

RedhatCVE•added 2025/10/04 12:56 a.m.•9 views

CVE-2025-60453

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the column management module, specifically in the app\system\column\admin\index.class.php component. The vulnerability allows attackers to upload malicious SVG files...

6.1CVSS6.1AI score0.00244EPSS

SaveExploits1References1

EUVD•added 2025/10/03 8:7 p.m.•8 views

EUVD-2024-33148