CVE-2023-29839

CVE-2023-29839 Hotel Druid 3.0.4 저장형 크로스 사이트 스크립팅 취약점 CMS 링크: https://www.hoteldruid.com/ 영향 받는 버전: 3.0.4 심각도 및 CVSS: 5.4 Medium | 벡터: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Hotel Druid 애플리케이션 3.0.4 버전의 여러 페이지에 저장형 크로스 사이트 스크립팅XSS 취약점이 존재하여 임의의 명령 실행이 가능합니다. 취약 필드: "문서" 기능의 Surname, Name,...

CVE-2024-51031

CVE-2024-51031 描述 Sourcecodester Cab Management System 1.0 的 manageaccount.php 中存在跨站脚本XSS漏洞，允许远程认证用户通过“名字”、“中间名”和“姓氏”字段注入任意Web脚本。 漏洞类型 跨站脚本攻击 XSS 供应商 Sourcecodester 受影响产品代码库： https://www.sourcecodester.com/php/15180/cab-management-system-phpoop-free-source-code.html - 1.0 受影响组件： Sourcecodester Ca...

CVE-2023-36158

CVE-2023-36158 sourcecodester Toll Tax Management System 1.0에 존재하는 Cross Site Scripting XSS 취약점으로, 원격 공격자가 My Account 페이지의 First Name 및 Last Name 필드를 통해 임의 코드를 실행할 수 있습니다...

liferay-xss-7.2.1GA2-poc-report-CVE-2020-7934

LifeRay 7.2.1 GA2의 MyAccountPortlet을 통한 인증된 저장 XSS 검색 결과에 의해 실행됨 LifeRay 버전 7.1.0부터 7.2.1 GA2까지, 사용자 계정의 First Name, Middle Name, Last Name 필드는 모두 저장 XSS 문제에 취약합니다. 모든 사용자는 특정 XSS 페이로드로 이 필드를 수정할 수 있으며, 이 페이로드는 데이터베이스에 저장되어 사용자를 "감염"시킵니다. 그런 다음 다른 사용자를 검색하기 위해 검색 기능을 사용할 때 페이로드가 렌더링됩니다. 감염된 사용자가 ...

CVE-2023-36159

CVE-2023-36159 sourcecodester Lost and Found Information System 1.0의 크로스 사이트 스크립팅XSS 취약점으로 인해 원격 공격자가 Create User 페이지의 First Name, Middle Name 및 Last Name 필드를 통해 임의 코드를 실행할 수 있습니다...

CVE-2025-55287-POC

CVE-2025-55287-POC Genealogy 앱 4.4.0 이전 버전에서 인증된 저장형 크로스 사이트 스크립팅XSS 취약점으로, 임의의 JavaScript 실행 및 Editor+ 역할에서 Administrator로의 권한 상승이 가능합니다. 요약 취약점 유형: 저장형 크로스 사이트 스크립팅 CWE-79 영향을 받는 구성 요소: 'Person'의 이름과 성 영향을 받는 버전: 4.4.0 이전 모든 버전 영향: 피해자 브라우저에서 공격자가 제공한 JavaScript의 지속적 실행; 세션 하이재킹, DOM을 통한 CSRF, ...

CVE-2024-54951

Monica-저장형-XSS-취약점 CVE-2024-54951 CVE-2024-54951 2024년 11월 20일에 이메일을 통해 monica 개발팀에 연락했습니다. 또한 LinkedIn을 통해 연결 요청 메시지와 그 후 몇 주 동안 다른 플랫폼을 통해 연락했습니다. 3개월이 지나도 응답이 없어 여기에 게시합니다. Monica Docker v. 4.1.2 저장형 XSS 취약점 1. 먼저 상단 창의 연락처 버튼을 클릭합니다. 2. 오른쪽에서 Add someone을 클릭합니다. 3. 모든 이름 입력란에 XSS 페이로드를 입력하세요...

CVE-2026-7884 IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their given name and surname to include malicious JavaScript code. When an administrator later accesses the user account management panel and views that user's permissions, the...

CVE-2026-7884 IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their given name and surname to include malicious JavaScript code. When an administrator later accesses the user account management panel and views that user's permissions, the...

PT-2026-91732

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics versions 12.1.0 through 12.1.3 FP1 IBM Cognos Analytics versions 12.0.4 through 12.0.4 FP2 Description A non-privileged user can inject malicious JavaScript code by editing their given name and surname. The code executes...

CVE-2026-86257

CVE-2026-86257 affects wger before version 2.6 . The root cause is a lack of sanitization on the first_name and last_name fields in the gym member TSV export endpoint , enabling any gym member to inject spreadsheet formulas such as =HYPERLINK. When an admin opens the exported file in Excel or Lib...

EUVD-2026-72113

wger before 2.6 fails to sanitize firstname and lastname fields in the gym member TSV export endpoint, allowing any gym member to inject spreadsheet formulas. Attackers can inject formulas like =HYPERLINK to exfiltrate admin data or execute code when admins open the exported file in Excel or...

CVE-2026-6286

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customer name fields in versions up to and including 2.2. This is due to an authentication bypass where the AddBookingCommand explicitly skips nonce verification...

WordPress Booking for Appointments and Events Calendar plugin <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission vulnerability

Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission vulnerability discovered by Lucas Montes NiRoX in WordPress Plugin Amelia versions = 2.2...

CVE-2026-6286

Amelia – Booking for Appointments and Events Calendar (WordPress plugin, versions ≤ 2.2) is vulnerable to unauthenticated stored XSS via customer name fields. The AddBookingCommand explicitly skips nonce verification (Command.php line 186), allowing unauthenticated users to submit booking data. A...

CVE-2026-6286 Booking for Appointments and Events Calendar <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via customer name fields in versions up to and including 2.2. This is due to an authentication bypass where the AddBookingCommand explicitly skips nonce verification...

CVE-2026-12807

A vulnerability was found in Edimax BR-6478AC V2 1.23. This affects the function setWAN of the file /goform/setWAN of the component POST Request Handler. The manipulation of the argument pppUserName/pptpUserName/L2TPUserName results in command injection. It is possible to launch the attack...

CVE-2026-12807 Edimax BR-6478AC V2 POST Request setWAN command injection

A vulnerability was found in Edimax BR-6478AC V2 1.23. This affects the function setWAN of the file /goform/setWAN of the component POST Request Handler. The manipulation of the argument pppUserName/pptpUserName/L2TPUserName results in command injection. It is possible to launch the attack...

PT-2026-51254

Name of the Vulnerable Software and Affected Versions Edimax BR-6478AC V2 version 1.23 Description Command injection can be triggered remotely via the POST Request Handler component. The issue exists within the setWAN function located in the '/goform/setWAN' endpoint. Manipulation of the...

Server-Side Template Injection

Bagisto is vulnerable to Server-Side Template Injection SSTI. The vulnerability is due to improper handling of user-controlled first name and last name fields in server-side templates, which allows a low-privileged attacker to inject and execute malicious template expressions...