PMB v7.4.1 - Cross Site Scripting Detection

PMB v7.4.1 allow attacker to inject arbitrary malicious HTML or Javascripts code in user web browser via nosearch parameter !/usr/bin/env python3 -- coding: utf-8 -- """PMB v7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

SHOOWBIZ - Cross Site Scripting Detection

Cross-Site Scripting, is a type of security vulnerability commonly found in web applications. It occurs when an attacker injects malicious scripts typically written in JavaScript into web pages viewed by other users. !/usr/bin/env python3 -- coding: utf-8 -- """Cross-Site Scripting, is a type of...

Senayan Library Management System v9.5.2 (Bulian) - Cross-Site Scripting Detection

SLiMS 9.5.2 Bulian vulnerable to Cross-Site Scripting in index.php. When injected, website will execute the payload repeatedly !/usr/bin/env python3 -- coding: utf-8 -- """SLiMS 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

TurboCRM - Cross-Site Scripting Detection

TurboCRM contains a cross-site scripting vulnerability which allows a remote attacker to inject arbitrary JavaScript into the response returned by the application. !/usr/bin/env python3 -- coding: utf-8 -- """TurboCRM contains a cross-site scripting vulnerability which allows a remote attacker to...

postMessage - Cross-Site Scripting Detection

postMessage contains a cross-site scripting vulnerability. An attacker can execute arbitrary script and therefore steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding: utf-8 -- """postMessage contains a cross-site scripting vulnerability.""" impo...

WordPress Ambience Theme <=1.0 - Cross-Site Scripting Detection

WordPress Ambience Theme 1.0 and earlier was affected by a cross-site scripting vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Ambience Theme 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name':...

WordPress Blogroll Fun-Show Last Post and Last Update Time 0.8.4 - Cross-Site Scripting Detection

WordPress Plugin Blogroll Fun-Show Last Post and Last Update Time 0.8.4 and possibly prior versions are prone to a cross-site scripting vulnerability because of a failure to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser ...

WordPress Finder - Cross-Site Scripting Detection

WordPress Plugin Finder contains a cross-site scripting vulnerability via the order parameter. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and laun...

WordPress FlagEm - Cross-Site Scripting Detection

WordPress FlagEm plugin contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks...

WordPress Slideshow - Cross-Site Scripting Detection

WordPress Slideshow plugin contains multiple cross-site scripting vulnerabilities. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...

YesWiki <2022-07-07 - Cross-Site Scripting Detection

YesWiki before 2022-07-07 contains a cross-site scripting vulnerability via the id parameter in the AccueiL URL. !/usr/bin/env python3 -- coding: utf-8 -- """YesWiki before 2022-07-07 contains a cross-site scripting vulnerability via the id parameter in the AccueiL UR.""" from kittysploit import...

Zoho ManageEngine ADSelfService Plus <=6103 - Cross-Site Scripting Detection

Zoho ManageEngine ADSelfService Plus 6103 and prior contains a reflected cross-site scripting vulnerability on the loadframe page. !/usr/bin/env python3 -- coding: utf-8 -- """Zoho ManageEngine ADSelfService Plus 6103 and prior contains a reflected cross-site scripting vulnerability on.""" from...

CandidATS 3.0.0 - Cross-Site Scripting. Detection

CandidATS 3.0.0 contains a cross-site scripting vulnerability via the sortBy parameter of the ajax.php resource. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Avaya Aura Utility Services Administration - Cross-Site Scripting Detection

Avaya Aura Utility Services Administration contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch oth...

WordPress e-search <=1.0 - Cross-Site Scripting Detection

WordPress e-search 1.0 and before contains a reflected cross-site scripting vulnerability via titleaz.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting Detection

WordPress HDW Video Gallery 1.2 and before contains a cross-site scripting vulnerability via mychannel.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting Detection

WordPress HDW Video Gallery 1.2 and before contains a cross-site scripting vulnerability via playlist.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Contao <4.13.3 - Cross-Site Scripting Detection

Contao prior to 4.13.3 contains a cross-site scripting vulnerability. It is possible to inject arbitrary JavaScript code into the canonical tag. !/usr/bin/env python3 -- coding: utf-8 -- """Contao prior to 4.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

TP-Link Archer A20 v3 Router - Cross-site Scripting Detection

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...

Discourse - Cross-Site Scripting Detection

Discourse contains a cross-site scripting vulnerability. An attacker can execute arbitrary script and thus steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Discourse contains a cross-site scripting vulnerability.""" from...