23408 matches found
EUVD-2024-55342
Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts into user profile fields. Attackers can input script payloads in the first name field that will execute when the profile is viewed by other users, potentially...
CVE-2025-34499
creationtimestamp| type| source ---|---|--- 2025-12-12 00:03:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7qryxtljv2m...
CampCodes Online Student Enrollment System 代码问题漏洞
CampCodes Online Student Enrollment System is an online enrollment system from CampCodes Philippines, Inc. A code issue vulnerability exists in CampCodes Online Student Enrollment System version 1.0, which stems from the incorrect manipulation of the parameter userphoto in the file...
PT-2025-51028
Name of the Vulnerable Software and Affected Versions campcodes Online Student Enrollment System version 1.0 Description A flaw exists in campcodes Online Student Enrollment System that allows for unrestricted file upload. This issue affects the file '/admin/index.php?page=user-profile' and...
CVE-2024-58304
creationtimestamp| type| source ---|---|--- 2025-12-11 23:39:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7qqnic5ze2o...
CVE-2024-58312
creationtimestamp| type| source ---|---|--- 2025-12-11 23:35:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7qqgreuut2m...
CVE-2024-58313
creationtimestamp| type| source ---|---|--- 2025-12-11 23:23:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7qps2d45q2u...
CVE-2025-66451
creationtimestamp| type| source ---|---|--- 2025-12-11 23:15:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7qpd4mabn2y...
CVE-2024-58289
Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts into user profile fields. Attackers can input script payloads in the first name field that will execute when the profile is viewed by other users, potentially...
CVE-2025-66474
XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Versions 16.10.9 and below, 17.0.0-rc-1 through 17.4.2 and 17.5.0-rc-1 through 17.5.0 have insufficient protection against /html injection, which...
CVE-2024-58289 Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fields
Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts into user profile fields. Attackers can input script payloads in the first name field that will execute when the profile is viewed by other users, potentially...
CVE-2024-58289 Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fields
Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts into user profile fields. Attackers can input script payloads in the first name field that will execute when the profile is viewed by other users, potentially...
CVE-2024-58289 Microweber 2.0.15 Stored Cross-Site Scripting via User Profile Fields
Microweber 2.0.15 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts into user profile fields. Attackers can input script payloads in the first name field that will execute when the profile is viewed by other users, potentially...
CVE-2024-58289
CVE-2024-58289 describes a stored cross-site scripting (XSS) in Microweber 2.0.15, where an authenticated attacker can inject script payloads into user profile fields (notably the First Name) that execute when other users view the profile. Multiple connected sources confirm the vulnerability and ...
CVE-2025-13780
creationtimestamp| type| source ---|---|--- 2025-12-11 21:01:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7qhtcb7uf2x 2025-12-12 03:00:11+00:00| published-proof-of-concept| Telegram/BEGHvjeMZGgXWSAZ9ohv0RebKFp9tt0rX98-HUWwygFBBw 2025-12-12 15:00:09+00:00|...
CVE-2025-65473
creationtimestamp| type| source ---|---|--- 2025-12-11 20:55:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7qhikdkcu2u...
CVE-2025-55314
creationtimestamp| type| source ---|---|--- 2025-12-11 18:07:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7q63x5ckx2q...
CVE-2025-67740
creationtimestamp| type| source ---|---|--- 2025-12-11 17:39:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7q4jr2euj2u...