CVE-2026-47761

👋 Привет! Исследование безопасности 🛡️ CVE-2026-47761 – Исследователь безопасности Тип : Хранимый межсайтовый скриптинг XSS Продукт : TinyMCE Ссылки : CVE : https://nvd.nist.gov/vuln/detail/CVE-2026-47761 GHSA : https://github.com/tinymce/tinymce/security/advisories/GHSA-vg35-5wq7-3x7w Зал славы...

CVE-2026-105291 feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting

A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoint. The manipulation of the argument keyword leads to cross...

EUVD-2026-92402

A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoint. The manipulation of the argument keyword leads to cross...

CVE-2026-105291

The software feelec-yishu feelcrm-os 1.0.0 contains a cross-site scripting (XSS) vulnerability in the Department Search Endpoint component. The root cause is located in the GroupController::index function within the file App/Feelcrm/Index/Controller/GroupController.class.php, where the manipulati...

CVE-2026-105291 feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting

A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoint. The manipulation of the argument keyword leads to cross...

CVE-2023-43877-RiteCMS-Stored-XSS---Home

Rite CMS v3.0 Multiples XSS stockés Auteur : Sergio Description : Rite CMS 3.0 est affecté par une vulnérabilité de type Cross-Site Scripting XSS stocké multiple qui permet aux attaquants d'exécuter du code arbitraire via un payload conçu dans les champs de la page d'accueil du menu Administratio...

audit-xss-cve-2020-7934

CVE 2020-7934 Comment exécuter cette CVE Prérequis 1. docker Remarques Il est possible de mettre le script d'attaque en ligne via le code js http://yourjavascript.com/ Notre script Js en ligne pour l'attaque html Commandes de configuration 1. allez dans le dossier racine de ce projet 2. exécutez ...

CVE-2026-105289 feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFormModel.class.php htmlspecialchars_decode cross site scripting

A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialcharsdecode of the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php of the component Create Customer Endpoint. Performing a manipulation of the argument customerformremark resul...

CVE-2026-105289 feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFormModel.class.php htmlspecialchars_decode cross site scripting

A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialcharsdecode of the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php of the component Create Customer Endpoint. Performing a manipulation of the argument customerformremark resul...

CVE-2026-105289

The feelec-yishu feelcrm-os version 1.0.0 is vulnerable to a Cross-Site Scripting (XSS) flaw within the Create Customer Endpoint component. The root cause is the use of the htmlspecialchars_decode function in the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php. An attacker can initiate...

WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin LearnPress versions = 4.4.9...

CVE-2024-48589

phpAbook 9.0i - Уязвимость межсайтового скриптинга XSS CVE-2024-48589 Краткое описание: Уязвимость межсайтового скриптинга XSS была обнаружена в параметре rol файла index.php или в разделе пути приложения phpAbook. Эта уязвимость позволяет злоумышленнику внедрить произвольный JavaScript-код в...

CVE-2025-68147-OSPOS-Stored-XSS

CVE-2025-68147 : Cross-Site Scripting XSS stocké dans OpenSourcePOS Métadonnées| Détails ---|--- Identifiant CVE| CVE-2025-68147 Sévérité| Élevée CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N Type de vulnérabilité| Cross-Site Scripting stocké CWE-79 Versions concernées| OpenSourcePOS v3.4.0, v3.4....

EUVD-2026-92392

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the argument redirecturl leads to cross site scripting. The atta...

CVE-2021-46069

CVE-2021-46069 Titre de l'exploit : Vehicle Service Management System - 'Mechanic List' Stored Cross Site Scripting XSS Auteur de l'exploit : SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM Références :...

CVE-2026-104807

DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content into the web application. The specific flaw exists within the web portal listening on TCP port 443, under Configuration → Domain...

CVE-2026-104407

Cross-Site Request Forgery CSRF vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting: from n/a through 11.17.9...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

Important: Red Hat Security Advisory: rhc-worker-script security update

An update for rhc-worker-script is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Presto Player versions = 4.5.2...