CVE-2021-41823: Improper Neutralization of Input During Web Page Generation

The Web Application Firewall WAF in Kemp LoadMaster 7.2.54.1 allows certain uses of onmouseover to bypass an XSS protection mechanism...

Themify Portfolio Post < 1.2.1 - Contributor+ Stored XSS

The plugin does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privileged users such as admin. Exploit...

PT-2022-21323

Name of the Vulnerable Software and Affected Versions u5cms version 8.3.5 Description The issue allows for Cross Site Scripting XSS when a user accesses the default home page with a specific parameter. The parameter Onmouseover can be used to inject HTML code, potentially leading to security...

Form Maker < 1.13.60 - Authenticated Stored XSS

The plugin does not escape its Form Title before outputting it in an attribute when editing a form in the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue Create or edit a form and add the following payload in the Form Title field "autofocus onmouseover=alert/XSS///...

CVE-2018-1000848

Wampserver version prior to version 3.1.5 contains a Cross Site Scripting XSS vulnerability in index.php localhost page that can result in very low. This attack appear to be exploitable via payload onmouseover. This vulnerability appears to have been fixed in 3.1.5 and later...

CVE-2018-1000848

Wampserver version prior to version 3.1.5 contains a Cross Site Scripting XSS vulnerability in index.php localhost page that can result in very low. This attack appear to be exploitable via payload onmouseover. This vulnerability appears to have been fixed in 3.1.5 and later...

Cross site scripting

Wampserver version prior to version 3.1.5 contains a Cross Site Scripting XSS vulnerability in index.php localhost page that can result in very low. This attack appear to be exploitable via payload onmouseover. This vulnerability appears to have been fixed in 3.1.5 and later...

PT-2018-9572

Name of the Vulnerable Software and Affected Versions Wampserver versions prior to 3.1.5 Description The issue is related to a Cross Site Scripting XSS vulnerability in the index.php localhost page. This can be exploited via a payload using the onmouseover event, which can result in low impact. T...

CVE-2018-13849

editrequests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadequate XSS protection mechanism based on pregreplace...

PT-2018-12222

Name of the Vulnerable Software and Affected Versions yTakkar Instagram-clone through 2018-04-23 Description The issue is related to inadequate XSS protection based on preg replace, allowing for XSS via an onmouseover payload in the edit requests.php file. Recommendations For yTakkar...

CVE-2018-13849: Improper Neutralization of Input During Web Page Generation

editrequests.php in yTakkar Instagram-clone through 2018-04-23 has XSS via an onmouseover payload because of an inadequate XSS protection mechanism based on pregreplace...

PT-2018-6047

Name of the Vulnerable Software and Affected Versions: sanitize-html versions 1.2.2 and below Description: The issue concerns a cross-site scripting vulnerability in the sanitize-html library, which is used for scrubbing HTML input for malicious values. This vulnerability can be exploited when th...

tamilchristianshop.com XSS vulnerability

Open Bug Bounty ID: OBB-547922 Description| Value ---|--- Affected Website:| tamilchristianshop.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-8103

In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...

CVE-2017-8103

In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...

PT-2017-18118

Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.11 Description The issue concerns the Email MyCode component, which allows for cross-site scripting XSS attacks. This is demonstrated through the use of an onmouseover event. Recommendations For versions prior to...

CVE-2017-8103: Improper Neutralization of Input During Web Page Generation

In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event...

dx.com XSS vulnerability

Vulnerable URL: http://www.dx.com/s/123?PriceIntvl=1-94=100' onmouseover=alert/xssposed/=AvgRating=2 Details: Description| Value ---|--- Patched:| Yes, at 18.01.2016 Latest check for patch:| 18.01.2016 04:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1667...

Discuz!多版本 存储型XSS脚本漏洞

简要描述： 2009年一次偶然间测试发现的此XSS漏洞，因为是存储型的，我想大家应该知道它的危害吧。相隔这么多年DZ不断的更新版本，但此漏洞依然存在,今天就发布出来吧！留着也没什么用会长毛的，呵呵。 在此我要感谢一下我的好朋友Jackal在09年的时候一起帮我测试漏洞的。 当时我们一起测试的是DZ6.0-DZ7.2，不知道是不是通杀啊。哈哈！没有一个一个去测试。有条件的去测试一下吧。 详细说明： 发贴进入源码模式，写入如下的exp emailurlimghttp://qhkest.com onmouseover=alert/DZ-xss-0day/; /img /url/email...

Cross site scripting

Cross-site scripting XSS vulnerability in Small Pirate SPirate 2.1 allows remote attackers to inject arbitrary web script or HTML via an onmouseover action in an img BBCode tag within a url BBCode tag...