EUVD-2022-55022

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix more uncharged while msg has moredata In tcpbpfsendverdict, if msg has more data after tcpbpfsendmsgredir: tcpbpfsendverdict tosend = msg-sg.size //msg-sg.size = 22220 case SKREDIRECT: skmsgreturn //uncharged...

CVE-2025-62701 Stored XSS through system messages

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Wikistories allows Stored XSS.This issue affects Mediawiki - Wikistories: from master before 1.44...

CVE-2025-62701 Stored XSS through system messages

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Wikistories allows Stored XSS.This issue affects Mediawiki - Wikistories: from master before 1.44...

CVE-2025-62701

CVE-2025-62701 concerns a stored XSS in the Wikimedia Foundation MediaWiki Wikistories extension. The issue is caused by improper neutralization of input during web page generation, enabling stored XSS. Affected component: Wikistories (extension) as used in MediaWiki, with impact on versions from...

CVE-2025-62702 Stored XSS through system messages

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - PageTriage Extension allows Stored XSS.This issue affects Mediawiki - PageTriage Extension: from master before 1.44...

CVE-2025-62702

CVE-2025-62702 describes a stored XSS in the Wikimedia MediaWiki PageTriage Extension (vulnerable in master before 1.44). The issue stems from improper neutralization of user input during web page generation, allowing stored XSS per the description. Affected component: PageTriage Extension for Me...

CVE-2025-62694 Stored XSS through a system message

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - WikiLove Extension allows Stored XSS.This issue affects Mediawiki - WikiLove Extension: 1.39...

CVE-2025-62695 Stored XSS through system messages

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Stored XSS.This issue affects Mediawiki - WikiLambda Extension: master...

Liferay Portal和Liferay DXP 访问控制错误漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS, and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DX...

CVE-2025-62657 Stored XSS through system messages in PageForms

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki PageForms extension allows Stored XSS.This issue affects MediaWiki PageForms extension: 1.44...

CVE-2025-62657

CVE-2025-62657 is a stored XSS vulnerability in the Wikimedia Foundation MediaWiki PageForms extension (affected version: 1.44). The issue arises from improper neutralization of input during web page generation, enabling malicious input to be stored and later rendered in page content. Connected s...

thunderbird: firefox: Cross-process information leaked due to malicious IPC messages

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process...

CVE-2025-62698 Stored XSS through system messages in ExternalGuidance

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - ExternalGuidance allows Stored XSS.This issue affects Mediawiki - ExternalGuidance: from master before 1.39...

CVE-2025-62698 Stored XSS through system messages in ExternalGuidance

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - ExternalGuidance allows Stored XSS.This issue affects Mediawiki - ExternalGuidance: from master before 1.39...

CVE-2025-62698

CVE-2025-62698 corresponds to a Stored XSS in The Wikimedia Foundation Mediawiki - ExternalGuidance extension. Affected component is ExternalGuidance for MediaWiki, with improper neutralization of input during web page generation described as the vulnerability cause. The issue is stated to affect...

CVE-2025-62693

CVE-2025-62693 is a stored XSS vulnerability in the MediaWiki LastModified Extension (MediaWiki – LastModified). Multiple sources confirm that the issue arises from lack of proper escaping in system messages (e.g., lastmodified-* values), allowing injected HTML/script to be stored and served to u...

CVE-2025-62693 Stored XSS through system messages in LastModified

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - LastModified Extension allows Stored XSS.This issue affects Mediawiki - LastModified Extension: from master before 1.39...

EUVD-2025-34930

Citizen vulnerable to stored XSS in sticky header button messages...

GHSA-G955-VW6W-V6PP Citizen vulnerable to stored XSS in sticky header button messages

Summary The JS implementation for copying button labels to the sticky header in the Citizen skin unescapes HTML characters, allowing for stored XSS through system messages. Details In the copyButtonAttributes function in stickyHeader.js, when copying the button labels, the innerHTML of the new...

Citizen vulnerable to stored XSS in sticky header button messages

Summary The JS implementation for copying button labels to the sticky header in the Citizen skin unescapes HTML characters, allowing for stored XSS through system messages. Details In the copyButtonAttributes function in stickyHeader.js, when copying the button labels, the innerHTML of the new...