CVE-2026-59664

A Cross-Site Scripting (XSS) vulnerability exists in the Repasat application . The flaw is located in the "nomServicioPrestado" parameter of the "/es/providedservices/store" endpoint. Successful exploitation could allow an attacker to trick a user into executing arbitrary code within their browse...

CVE-2026-59664 Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomServicioPrestado” parameter is affected – endpoint “/es/providedservices/store”...

CVE-2026-59663 Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomDelegacion” parameter is affected – endpoint “/es/delegations/store”...

EUVD-2026-91381

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomCompetidor” parameter is affected – endpoint “/es/competitors/store”...

EUVD-2026-91383

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomRuta” parameter is affected – endpoint “/es/routes/update/693”...

EUVD-2026-91385

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomZonaGeo” parameter is affected – endpoint “/es/geozones/update/149979”...

CVE-2026-85492

The All in One SEO plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting (XSS) in all versions up to and including 5.0.1.1 . The root cause is insufficient input sanitization and output escaping involving the URL Pathname . An unauthenticated attacker can inject arbitrary web scrip...

CVE-2026-59670

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomListaValidacion” parameter is affected – endpoint...

CVE-2026-59669

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/es/attachmenttypes/update/203336”...

CVE-2026-59673

The Repasat application is vulnerable to a Cross-Site Scripting (XSS) vulnerability. Specifically, the "nomTipoCli" parameter at the "/es/clientypes/update/109441" endpoint is affected. Successful exploitation could allow an attacker to trick a user into executing arbitrary code within the victim...

CVE-2026-59671

The Repasat application is affected by a Cross-Site Scripting (XSS) vulnerability. The specific affected endpoint is “/es/datatables/getemployeetypesdatatable” . Successful exploitation could allow an attacker to trick a user into executing arbitrary code within the victim’s browser. No specific ...

XSS2Shell-CVE-2026-64638

このリポジトリには README がありません。...

CVE-2026-59669

The Repasat application is vulnerable to a Cross-Site Scripting (XSS) flaw (CWE-79). The issue exists in the "name" parameter of the endpoint “/es/attachmenttypes/update/203336” . Successful exploitation could allow an attacker to trick a user into executing arbitrary code within their browser. N...

EUVD-2026-91319

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/es/attachmenttypes/update/203336”...

CVE-2026-59669 Multiple vulnerabilities in the Repasat application

Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “name” parameter is affected – endpoint “/es/attachmenttypes/update/203336”...

CVE-2018-25031

Swagger UI에서의 크로스 사이트 스크립팅 PoC: CVE-2018-25031 Python Selenium 활용 이 저장소에는 Selenium 라이브러리를 사용하여 Swagger UI의 크로스 사이트 스크립팅XSS 취약점에 대한 개념 증명PoC을 보여주는 Python 스크립트가 포함되어 있습니다. 이 PoC의 목적은 악성 페이로드를 사용하여 Swagger UI를 통해 해당 취약점에 취약한 사이트를 식별하는 것입니다. Swagger UI의 크로스 사이트 스크립팅XSS 취약점 Swagger UI는 사용자 친화적인 인터페이스를...

CVE-2026-100182 Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor

The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all versions up to, and including, 5.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

WSO2-2020-0731

WSO2-2020-0731: WSO2 Carbon의 XXE 및 XSS 취약점 여러 WSO2 제품에서 잠재적인 XXE 및 XSS 취약점이 확인되었습니다. 공급업체 공개: 이 취약점에 대한 공급업체의 공개 및 수정 사항은 여기에서 확인할 수 있습니다. CVE가 없는 이유는? 저와 공급업체 모두 이러한 취약점에 대해 CVE를 요청하지 않았습니다. 요구 사항: 이 취약점을 악용하려면 다음이 필요합니다: 합법적인 WSO2 사용자를 속여 악성 저장소를 추가하도록 유도 또는 유효한 사용자 자격 증명 개념 증명: 자세한 내용과 악용 절차는 ...

WSO2-2021-1261

WSO2-2021-1261: WSO2 ESB의 여러 크로스 사이트 스크립팅 잘못된 출력 인코딩으로 인해 WSO2 ESB에서 여러 크로스 사이트 스크립팅XSS 공격이 확인되었습니다. 공급업체 공개: 이 취약점에 대한 공급업체의 공개 및 수정 사항은 여기에서 확인할 수 있습니다. CVE가 없는 이유는? 저나 공급업체 모두 이 취약점에 대해 CVE를 요청하지 않았습니다. 요구 사항: 이 취약점은 다음을 요구합니다: 일부 XSS는 유효한 사용자 자격 증명이 필요합니다. 개념 증명: 자세한 내용과 악용 과정은 이 PDF에서 확인할 수...

CVE-2026-97318

The Giveaways and Contests by RafflePress WordPress plugin versions prior to 1.12.27 is vulnerable to an unauthenticated stored open redirect . The flaw exists because the plugin fails to properly validate the parent page URL of a giveaway before saving it. An attacker can exploit this to manipul...