Astra Linux – Vulnerability in Chromium

Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to inject scripts or HTML into a privileged page via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Chromecast within Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to inject scripts or HTML into a privileged page via malicious network traffic. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the keyboard interface in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Firefox

Because Firefox did not implement the unsafe-hashes CSP directive, an attacker who was able to inject markup into a page otherwise protected by a Content Security Policy might have been able to inject executable scripts. This would be severely restricted by the specified Content Security Policy o...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in the Omnibox component of Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who convinced a user to perform certain UI gestures to inject arbitrary scripts or HTML through a crafted HTML page. Chromium security severity: Low...

CVE-2021-46071

CVE-2021-46071 Titre de l'exploit : Système de gestion des services de véhicules - 'Liste des catégories' Cross-Site Scripting XSS stocké Auteur de l'exploit : SANU P.L CVE : CVE-2021-46071 CVSS : 4.8 MEDIUM Références :...

CVE-2024-41301-Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting

CVE-2024-41301 - Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting Bookea-tu-Mesa подвержен уязвимости хранимого межсайтового скриптинга XSS. Эта ошибка позволяет злоумышленникам внедрять вредоносные скрипты, которые выполняются в контексте сеанса пользователя. Шаги для воспроизведения:...

CVE-2025-68147-OSPOS-Stored-XSS

CVE-2025-68147: Межсайтовый скриптинг XSS с сохранением в OpenSourcePOS Метаданные| Подробности ---|--- Идентификатор CVE| CVE-2025-68147 Серьезность| Высокая CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N Тип уязвимости| Межсайтовый скриптинг с сохранением CWE-79 Затронутые версии| OpenSourcePOS...

Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46072 Название эксплойта: Vehicle Service Management System - хранимый межсайтовый скриптинг XSS в 'Service List' Автор эксплойта: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIUM Ссылки: https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss...

CVE-2021-46068

CVE-2021-46068 익스플로잇 제목: Vehicle Service Management System - 'MyAccount' 저장형 크로스 사이트 스크립팅XSS 익스플로잇 작성자: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM 참조: https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss...

CVE-2026-105294

Legcord versions 1.1.0 through 1.3.0 are vulnerable to a configuration injection vulnerability via the window.legcord settings.setConfig bridge. This flaw allows scripts running on the Discord page to write arbitrary configuration keys. If an attacker leverages a Discord XSS , they can modify add...

CVE-2024-4367

CVE-2024-4367 POC Использование python poc.py mal.pdf "alert'0x2r2'" Ссылки CVE-2024-4367: Произвольное выполнение JS в PDF.js PDF.js PoC Сканер templates...

CVE-2016-10993

CVE-2016-10993 Vulnérabilité WordPress - XSS Cross-Site Scripting Emplacement de la vulnérabilité https://themesinfo.com/scoreme-wordpress-theme-design-496 Preuve de concept PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E Références...

CVE-2023-6000-POC

Détails généraux CVE-ID : CVE-2023-6000 Score CVSS : 6.1 Type : XSS stocké Version corrigée : Popup Builder 4.2.3 Cette vulnérabilité permet à un attaquant d'exploiter une faille de type Cross-Site Scripting XSS dans le plugin WordPress Popup Builder. Le plugin ne parvient pas à empêcher les...

CVE-2024-52318

CVE-2024-52318 🚨🚨CVE-2024-52318 - Уязвимость XSS в Apache Tomcat в сгенерированных JSP🚨🚨 Обзор CVE-2024-52318 — это межсайтовая XSS уязвимость в Apache Tomcat, возникающая из-за некорректного освобождения ресурсов в сгенерированных JavaServer Pages JSP. Данная проблема, внесённая предыдущим...

CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Уязвимость-отражённого-межсайтового-скриптинга Автор эксплойта: ersinerenler Домашняя страница вендора https://code-projects.org/blood-bank-in-php-with-source-code Ссылка на ПО...

CVE-2026-105114

OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted parameters rendered unencoded on the OAuth2 authorization error page. Attackers can lure victims to a crafted /oauth2/authorize link with repeat...

CVE-2026-105114 OpenAM before 16.1.3 Reflected XSS via OAuth2 Authorization Error Page

OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted parameters rendered unencoded on the OAuth2 authorization error page. Attackers can lure victims to a crafted /oauth2/authorize link with repeat...

EUVD-2026-91877

The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 3.2.19 due to insufficient input sanitization and output escaping. This makes it possibl...