CVE-2022-25063

CVE-2022-25063 This script exploits a vulnerability XSS in the TPLink WR840N router, using a field for injecting javascript code...

CVE-2024-34224

Computer Laboratory Management System using PHP and MySQL 1.0 Submitter: Kha Do Vulnerability Cross Site Scripting Description Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject...

CVE-2022-3464

CVE-2022-3464 puppyCMS 5.1까지에서 문제성problematic으로 분류된 취약점이 발견되었습니다. 이 취약점은 /admin/settings.php 파일의 알 수 없는 부분에 영향을 미칩니다. sitename 인수를 조작하면 교차 사이트 스크립팅XSS이 발생합니다. 원격으로 공격을 시작할 수 있습니다. 이 취약점의 관련 식별자는 VDB-210699입니다. 인증| 복잡성| 벡터 ---|---|--- 제공되지 않음| 제공되지 않음| 제공되지 않음 기밀성| 무결성| 가용성 ---|---|--- 제공되지 않음| 제공...

CVE-2026-105099 Omega Solution CoinEx Crypto Ticket Attachment Upload ticket cross site scripting

A weakness has been identified in Omega Solution CoinEx Crypto 2025. Affected by this vulnerability is an unknown functionality of the file /user/ticket of the component Ticket Attachment Upload. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The...

CVE-2026-105099

A cross-site scripting (XSS) vulnerability exists in the Ticket Attachment Upload component of Omega Solution CoinEx Crypto 2025 . The flaw originates from an unknown functionality within the /user/ticket file, allowing for remote manipulation. While the product website is no longer active and th...

CVE-2023-50596

CVE-2023-50596 Suggested description Cross Site Scripting vulnerability in Simple Image Stack Website using PHP and API v.1.00000 allows a remote attacker to execute arbitrary code via a crafted payload to the URL. Additional Information Lets paste our payload in the URL section...

CVE-2024-51032

CVE-2024-51032 Description A Cross-site Scripting XSS vulnerability in managerecipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner" input field. Vulnerability Type Cross Site Scripting XSS Vendor of Product...

Beautiful Cookie Consent Banner < 2.10.2 - Cross-Site Scripting

The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nscbarcontenthref' parameter in versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

Moodle Jitsi Meet 2.7-2.8.3 - Cross-Site Scripting

Moodle Jitsi Meet 2.7 through 2.8.3 plugin contains a cross-site scripting vulnerability via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject JavaScript code to be run by the application. id: CVE-2021-26812 info: name: Moodle...

CVE-2024-48415

CVE-2024-48415 Description itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the lastname, firstname, middlename, address, contactno, email and taxid parameters in new borrowers functionality on the Borrowers page. Vulnerability Type: Cros...

RootQuest-CTF-Box-Multi-Stage-Exploitation-VM

RootQuest CTF 박스 — 다단계 익스플로잇 VM 💀 Kalaichelvan Thieveshkar CB013248 · Staffordshire University · COMP50003 - Cyber Security II 개요 RootQuest 는 10단계 의 순차적 공격 경로를 포함하며 5가지 보안 도메인 에 걸친 CTF 가상 머신입니다. 각 챌린지는 다음 단계에 필요한 출력을 생성하므로, 플레이어는 완전한 루트 권한 탈취를 위해 웹, 암호, 네트워크 및 로컬 익스플로잇을 연결해야 합니다. 경고 / 사용 목적: 이 VM...

CVE-2024-42834

익스플로잇 제목: INCOGNITO SAC 저장형 크로스 사이트 스크립팅XSS 취약점 날짜: 2024년 7월 26일 익스플로잇 작성자: Etienne Supra 공급업체 홈페이지: https://www.incognito.com/products/service-activation-center/ 버전: 14.11 CVE : CVE-2024-42834 공급업체에 통보되었으며 취약점을 인지하였습니다. 취약점 요약 저장형 크로스 사이트 스크립팅XSS 취약점이 Incognito Service Activation Center User...

CVE-2020-16270

CVE-2020-16270 Suggested description : OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applications. Executed code can be used to steal administrator’s...

CVEs

CVE リスト CVE-2024-22890: My e-Diary App - クロスサイトスクリプティング 概念実証PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md CVE-2024-22909 : Online-Exam-System - クロスサイトスクリプティング 概念実証PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md CVE-2024-24134 : Online Food Menu -...

PT-2026-104643

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL. Attackers can point tools/bazar/actions/valeur.php at a controlled server returning BAZ fiche titre markup...

PT-2026-104654

Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories that executes markup from imported story files in the editor window. Attackers can craft a story file whose script calls the twineElectron openWithScratchFile IPC bridge to write and open a .bat file,...

PT-2026-104641

WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting doubly-encoded entities in video titles. Because safeString strips tags before decoding entities and runs twice via setTitle and save, attackers ca...

CVE-2026-105224: Improper Neutralization of Input During Web Page Generation

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL. Attackers can point tools/bazar/actions/valeur.php at a controlled server returning BAZfichetitre markup...

CVE-2024-22909

CVE-2024-22909 : Online-Exam-System - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-22909/blob/main/CVE-2024-22909.md...

CVE-2024-33210

CVE-2024-33210 Flatpress 1.3에서 XSS교차 사이트 스크립팅 취약점이 확인되었습니다. 이 취약점으로 인해 공격자는 다른 사용자가 보는 웹 페이지에 악성 스크립트를 주입할 수 있습니다. 취약점 유형: 교차 사이트 스크립팅 XSS 제품 공급업체: flatpress CMS 영향을 받는 제품 코드 베이스: Flatpress v1.3 - FlatPress 버전 1.3에서 수정될 예정입니다. 영향을 받는 구성 요소: URL CVE 영향 기타: 공격자는 이 취약점을 악용하여 사용자 브라우저의 컨텍스트에서 임의 코드를...