CVE-2024-42834

Exploit Title: INCOGNITO SAC STORED CROSS-SITE SCRIPTING XSS VULNERABILITY Date: 26 JULY 2024 Exploit Author: Etienne Supra Vendor Homepage: https://www.incognito.com/products/service-activation-center/ Version: 14.11 CVE : CVE-2024-42834 Vendor has been informed and acknowledge the vulnerability...

CVE-2020-16270

CVE-2020-16270 Suggested description : OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applications. Executed code can be used to steal administrator’s...

CVEs

CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md CVE-2024-22909 : Online-Exam-System - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md...

CVE-2024-22909

CVE-2024-22909 : Online-Exam-System - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-22909/blob/main/CVE-2024-22909.md...

CVE-2026-62100 WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in KuteShop = 4.2.9 versions...

CVE-2026-62100

The KuteShop WordPress theme (versions

CVE-2026-62095 WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Biolife = 3.2.3 versions...

CVE-2026-62095

The WordPress Biolife theme (versions

CVE-2026-62082

The Pin WP WordPress theme in versions

CVE-2026-62064 WordPress Ambed theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ambed = 1.0.0 versions...

CVE-2026-62064

The Ambed WordPress theme (versions

CVE-2026-42699

The WordPress FV Player 8 plugin (versions

CVE-2026-42702 WordPress Tutor LMS plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS tutor allows Reflected XSS.This issue affects Tutor LMS: from n/a through 4.1.0...

CVE-2026-42702

The Tutor LMS WordPress plugin in versions

CVE-2026-42631

The Qode Music WordPress plugin (versions

CVE-2024-33210

CVE-2024-33210 A cross-site scripting XSS vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by other users. Vulnerability Type: Cross Site Scripting XSS Vendor of Product: flatpress CMS Affected Product Code...

CVE-2024-24136

CVE-2024-24136 : Math Game Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24136.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24136/blob/main/CVE-2024-24136.md...

CVE-2024-40511

CVE-2024-40511 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMServerAdmin.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMServerAdmin.asmx function. Vulnerable Produ...

CVE-2024-48591

CVE-2024-48591 Vulnerability Disclosure: XSS in Inflectra SpiraTeam 7.2.00 Description Inflectra SpiraTeam version 7.2.00 is vulnerable to Cross-Site Scripting XSS through the upload of specially crafted SVG files, which can execute JavaScript when viewed directly. Vulnerability Type Cross-Site...

CVE-2022-38553

CVE-2022-38553 CROSS SITE SCRIPTING XSS ON "ACADEMY LEARNING MANAGEMENT SYSTEM" POC VIDEO: Security Risk: This security vulnerability allows to execute arbitrary JavaScript code in user browser if they access URL prepared by attackers...