CVE-2022-32118

CVE-2022-32118 - Arox-XSS Stored and Reflected Cross Site Scripting vulnerabilities exist in multiple pages of the Arox School ERP Pro application, including the login page, that allows for arbitrary execution of JavaScript commands. The application has many more parameters affected by Cross Site...

CVE-2021-38583

CVE-2021-38583 openBaraza HCM HR Payroll v.3.1.6 Reflected XSS vulnerability openBaraza HCM HR Payroll v.3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting XSS vulnerability on multiple pages. https://openbaraza.org...

CVE-2026-119054

Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Contributor-level users to inject script via the mpg and mpgmatch shortcode base-url attribute. Attackers can store entity-encoded payloads that pass kses but are decoded by...

EUVD-2026-112820

Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Contributor-level users to inject script via the mpg and mpgmatch shortcode base-url attribute. Attackers can store entity-encoded payloads that pass kses but are decoded by...

CVE-2026-119054

The Multiple Pages Generator by Themeisle plugin, versions prior to 4.2.5 , is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists in the base-url attribute of the [mpg] and [mpg_match] shortcodes. An attacker with Contributor-level privileges can inject entity-encoded payloads that...

CVE-2026-119054 Multiple Pages Generator by Themeisle before 4.2.5 Stored XSS via Shortcode base-url

Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Contributor-level users to inject script via the mpg and mpgmatch shortcode base-url attribute. Attackers can store entity-encoded payloads that pass kses but are decoded by...

CVE-2026-119054: Themeisle Multiple Pages Generator by Themeisle: Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows…

Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Contributor-level users to inject script via the mpg and mpgmatch shortcode base-url attribute. Attackers can store entity-encoded payloads that pass kses but are decoded by...

PT-2026-132128

Multiple Pages Generator by Themeisle before 4.2.5 contains a stored cross-site scripting vulnerability that allows Contributor-level users to inject script via the mpg and mpg match shortcode base-url attribute. Attackers can store entity-encoded payloads that pass kses but are decoded by html...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: f2fs: compress: fixed to avoid a use-after-free condition on dic. Call trace: memcpy+0x128/0x250 f2fsreadmultipages+0x940/0xf7c f2fsmpagereadpages+0x5a8/0x624 f2fsreadahead+0x5c/0x110 pagecacheraunbounded+0x1b8/0x590...

Hotel Druid 3.0.2 - Cross-Site Scripting Detection

Hotel Druid 3.0.2 contains a cross-site scripting vulnerability in multiple pages which allows for arbitrary execution of JavaScript commands. !/usr/bin/env python3 -- coding: utf-8 -- """Hotel Druid 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989294 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: pgalloc: fix memory leak caused by pgdfree pgd page is freed by generic implementation...

EUVD-2021-18786

Malware in sbrugna...

CVE-2021-38583

openBaraza HCM 3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting XSS on multiple pages: hr/subscription.jsp and hr/application.jsp and and hr/index.jsp with view= and data=...

CVE-2021-26776

CSZ CMS 1.2.9 is affected by a cross-site scripting XSS vulnerability in multiple pages through the field name...

CVE-2024-47325: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle MPG multiple-pages-generator-by-porthas allows SQL Injection.This issue affects MPG: from n/a through = 3.4.7...

CVE-2024-31971

Multiple stored cross-site scripting XSS vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow remote attackers to inject arbitrary JavaScript, as demonstrated by /mainPassword.html, /processIdentity.html, /public.html, /dhcp.html, /private.html, /hostname.html, /connectivity.html,...

CVE-2023-33927

A vulnerability in Themeisle MPG multiple-pages-generator-by-porthas.This issue affects MPG: from n/a through = 3.3.19...

Cross-site Scripting (XSS)

hoteldruid is vulnerable to Cross-site Scripting XSS. The vulnerability which exists in multiple pages allows a malicious attacker to execute arbitrary commands within the surname, name and nickname document functions...

Advanced Database Cleaner < 3.1.1 - Reflected Cross-Site Scripting

The plugin does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting https://example.com/wp-admin/admin.php?page=advanceddbcleaner&aDBctab=cron&aDBccat=all&"alert/XSS/ Other pages are affected...

3D Print Lite < 1.9.1.6 - Reflected Cross-Site Scripting

Description The plugin does not sanitise and escape some user input before outputting it back in attributes, leading to Reflected Cross-Site Scripting issues https://example.com/wp-admin/admin.php?page=p3dlitematerials&materialtext="alert/XSS/...