CVE-2025-40683

Reflected Cross-Site Scripting XSS in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searccity' parameter in /city.php...

CVE-2025-54534

In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset page...

CVE-2025-54534

In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset page...

CVE-2025-54534

In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset page...

CVE-2025-54534

CVE-2025-54534 describes a reflected cross-site scripting (XSS) on the JetBrains TeamCity installation, specifically on the agentpushPreset page. Affected software is TeamCity versions before 2025.07. The root cause is a reflected XSS vulnerability on that page, enabling an attacker to inject scr...

Prototype Pollution

Overview org.webjars.bower:linkifyjs is a Find URLs, email addresses, hashtags and @mentions in plain-text strings, then convert them into HTML links. Affected versions of this package are vulnerable to Prototype Pollution via the internal assign helper due to improper filtering of the proto...

CVE-2025-54295

A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered...

CVE-2025-7022 My Reservation System <= 2.3 - Reflected XSS

The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-7022

The CVE-2025-7022 entry concerns the WordPress plugin My Reservation System (versions ≤ 2.3). The connected data specifies that the plugin does not sanitize/escape a user-supplied parameter before echoing it back to the page, resulting in a Reflected Cross-Site Scripting (XSS) vulnerability that ...

CVE-2025-51411

A reflected cross-site scripting XSS vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint. The application fails to properly sanitize user input before reflecting it in the HTML response. This allows unauthenticated attackers to injec...

CVE-2025-4284

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Rolantis Information Technologies Agentis allows Reflected XSS, DOM-Based XSS. This issue affects Agentis: before 4.32...

CVE-2025-40598

The SMA100 series web interface is affected by three CVEs (CVE-2025-40598, CVE-2025-40597, CVE-2025-40596). CVE-2025-40598: Reflected XSS in the SMA100 web UI enables remote, unauthenticated attackers to potentially execute arbitrary JavaScript. CVE-2025-40597: Heap-based buffer overflow in the S...

CVE-2025-54295 Extension - dj-extensions.com - Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla

A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered...

CVE-2025-54295

CVE-2025-54295 concerns a Reflected XSS in the DJ-Reviews Joomla extension (versions 1.0–1.3.6). The vulnerability arises from a reflected cross-site scripting issue in that component, as reported across multiple sources (NVD/Red Hat/CVE list, PT Security). Affected product: DJ-Reviews (DJ-Extens...

CVE-2025-54295 Extension - dj-extensions.com - Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla

A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered...

CVE-2025-4284 Reflected XSS in Rolantis Information Technologies' Agentis

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Rolantis Information Technologies Agentis allows Reflected XSS, DOM-Based XSS. This issue affects Agentis: before 4.32...

CVE-2025-4284

CVE-2025-4284 affects Rolantis Information Technologies’ Agentis (pre-4.32). The issue is an Improper Neutralization of Input During Web Page Generation that enables Reflected XSS and DOM-Based XSS. Per the sources, the vulnerability impacts Agentis versions before 4.32, with CVSSv3.1 base metric...

CVE-2025-4284 Reflected XSS in Rolantis Information Technologies' Agentis

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Rolantis Information Technologies Agentis allows Reflected XSS, DOM-Based XSS. This issue affects Agentis: before 4.32...

CVE-2025-53528

Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions before 5.4.3, the version parameter of the "/docs" endpoint is vulnerable to a Reflected XSS Cross-Site Scripting attack. This XSS would notably allow an attacker to execute JavaScript code ...

PYSEC-2025-71

Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions before 5.4.3, the version parameter of the "/docs" endpoint is vulnerable to a Reflected XSS Cross-Site Scripting attack. This XSS would notably allow an attacker to execute JavaScript code ...