1158204 matches found
EUVD-2026-93467
A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the function DomSanitizer::sanitizeNodeAttribute of the file formwork/src/Sanitizer/DomSanitizer.php of the component URI Sanitizer. Such manipulation of the argument formaction leads to cross site...
blindxss-lite
blindxss-lite Flask로 구축된 경량 Blind XSSCross-Site Scripting 수집기 및 페이로드 서버입니다. 피해자 브라우저 데이터쿠키, localStorage, DOM 스니펫 등를 캡처하여 HTTP Basic Auth로 보호되는 SQLite 기반 대시보드로 전달하는 JavaScript 페이로드를 제공합니다. 기능 페이로드 전달 — /p.js는 sendBeacon 또는 fetch를 사용하는 자체 포함 JS 페이로드를 제공합니다 수집기 엔드포인트 — POST /c JSON/FormData 및 GET...
CVE-2023-29489
CVE-2023-29489 Эта уязвимость зафиксирована в системе Common Vulnerabilities and Exposures CVE. Она связана с cPanel — популярным программным обеспечением для управления хостингом. Данная ошибка позволяет проводить межсайтовые атаки XSS с помощью специально созданных запросов. Детали о...
CVE-2025-15591
Cross-site Scripting XSS in the Forums feature of OpenText Content Management Content Server could allow a bad actor to inject malicious code into a Forums web page...
EUVD-2026-93413
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected XSS. This issue affects E-Commerce Pack: through 2026-10-06. NOTE: The vendor was contacted early about this disclosur...
CVE-2024-4367-PDF.js-xss
CVE-2024-4367–PDF.js-xss CVE-2024-4367–PDF.js-xss 환경 다운로드, 압축 풀기, 진입 unzip cve-2024-4367-lab cd cve-2024-4367-lab 환경 시작 명령 mkdir upload chmod 777 upload docker-compose up -d...
Security Bulletin: Due to use of Nodejs Express.js, multiple vulnerabilities affect IBM Cloud Pak System[CVE-2024-43796, CVE-2024-43799, CVE-2024-43800]
Summary Multiple vulnerabilities in Send cross-site scripting XSS within the SendStream.redirect, serve-static built-in and response.redirect found in Node.js Express.js which is used by IBM Cloud Pak System. Vulnerabilities were addressed by IBM Cloud Pak System. Vulnerability Details...
CVE-2026-40806
Unauthenticated Cross Site Scripting XSS in Blog, Posts and Category Filter for Elementor = 2.1.0 versions...
CVE-2026-54477
CVE-2026-54477: Отсутствие заголовков безопасности в панели администратора кликджекинг / XSS Уведомление Поле| Значение ---|--- CVE| CVE-2026-54477 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 5.4 Medium Vector 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Vector 4.0|...
CVE-2026-50229
⚡ CVE-2026-50229 — Эксплойт XSS в примерах Apache Tomcat 🔴 Продвинутый сканер и эксплойт для межсайтового скриптинга XSS в веб-приложении примеров Apache Tomcat 📌 Обзор CVE-2026-50229 — это уязвимость межсайтового скриптинга XSS , обнаруженная в встроенном веб-приложении примеров , поставляемом с...
CVE-2026-104814
The Form Block WordPress plugin in versions
CVE-2026-104395 WordPress picu plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in picu = 3.10.1 versions...
CVE-2026-42636
The WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin for WordPress, versions
CVE-2026-42636 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.4.6 versions...
CVE-2026-42635 WordPress WooCommerce Simple Auctions plugin <= 3.0.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WooCommerce Simple Auctions = 3.0.10 versions...
CVE-2026-42634
The Video Background Block – Use video as background in the section. WordPress plugin, versions
CVE-2026-39766 WordPress ARForms plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in ARForms = 7.1.2 versions...
CVE-2026-39758 WordPress Midtrans-WooCommerce plugin <= 2.32.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Midtrans-WooCommerce = 2.32.3 versions...