CVE-2019-13633

CVE-2019-13633 Suggested description : Blinger.io v.1.0.2519 is vulnerable to Blind/Persistent XSS. Additional Information : Blinger.io - is a platform which used by global clients such as FxPro, Alfa Bank, OneTwoTrip, Ivi, KupiVIP Group, Belavia, Wargaming, Yandex, OZON, TCS Group Holding and...

CVE-2025-66850

Finding Within the ‘LibreNMS’ application, we discovered a reflected Cross-Site Scripting vulnerability; this vulnerability exists in the routing module’s protocol parameter, allowing an attacker to render malicious JavaScript in a victim’s browser. This vulnerability affects all versions from...

CVE-2023-44813

CVE-2023-44813 A reflected cross-site scripting XSS vulnerability in the mode parameter on Invite Friend function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter: mode Exploit - Proof of Concept POC...

CVE-2025-29602

CVE-2025-29602 - Stored cross site scriptingXSS vulnerabilities in the FlatPress CMS 1.3.1 Description A stored Cross-Site Scripting XSS vulnerability exists in the administration panel of Flatpress CMS 1.3.1. An attacker with admin privileges can inject a malicious JavaScript payload into the...

CVE-2022-29359

School Club Application System Issue: Unauthenticated Stored Cross-Site Scripting to HTML injection to RCE Author: Zak Clifford Date: 12.04.2022 Vendor: https://www.sourcecodester.com/php/15266/school-club-application-system-phpoop-free-source-code.html Software:...

CVE-2025-5777

Exploit for CVE-2025-5777: Citrix NetScaler Memory Disclosure CitrixBleed 2 T1606 Disclaimer Intented for authorized use only. It is your responsibility to verify authorization before use. I am not responsible for any legal or criminal proceedings filed against you for using this. Description...

evilginx

Evilginx v.1.1.0 ЭТА ВЕРСИЯ УСТАРЕЛА. ПОЖАЛУЙСТА, ИСПОЛЬЗУЙТЕ ПОСЛЕДНЮЮ ВЕРСИЮ! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx — это фреймворк для атак типа «человек посередине», используемый для фишинга учётных данных и сессионных куки любого веб-сервиса. Его ядро работает на...

CVE-2025-50363_BXSS_CVE

Nome del progetto e URL del repository: Maid Hiring Management System using PHP and MySQL Tipo di vulnerabilità: Escalation dei privilegi tramite Blind XSS Versionei interessatae: v1.0 💣Descrizione della vulnerabilità: È stata scoperta una vulnerabilità di Blind Cross-Site Scripting XSS nel Maid...

CVE-2022-46087

CVE-2022-46087 CloudSchool v3.0.1 è vulnerabile a Cross Site Scripting XSS. Un utente normale può rubare i cookie di sessione degli utenti amministratori attraverso una notifica ricevuta dall'utente amministratore. Riferimento a:...

CVE-2023-29489

CVE-2023-29489 La vulnerabilità di sicurezza è registrata nel sistema Common Vulnerabilities and Exposures CVE. Nello specifico, questa vulnerabilità è legata a cPanel, un popolare software di gestione hosting. Questo difetto consente attacchi di cross-site scripting XSS tramite richieste...

CVE-2025-63441

CVE-2025-63441 Titolo: XSS riflesso tramite arbitrarily supplied URL parameter param all'endpoint u/administrator/friends Sommario: È stata identificata una vulnerabilità di Cross-Site Scripting XSS riflesso nell'endpoint u/administrator/friends dell'applicazione OSSN. Questa vulnerabilità consen...

CVE-2021-40906

CVE-2021-40906 - XSS riflesso in una zona non autenticata Applicazione: CheckMK Management Web Console Versione del software: dalla 1.5.0 alla 1.5.0p25 Autore: Edgar Augusto Loyola Torres. Tipo di attacco: XSS riflesso Soluzione: aggiornare alla revisione 1.6.0p26 o successiva Sommario: Il softwa...

CVE-2025-63708

CVE-2025-63708 CVE-ID: CVE-2025-63708 Zugewiesen: 11-12-2025 Problemtyp: CWE-79 Cross-Site Scripting Betroffenes Produkt: „AI Font Matcher“ veröffentlicht am 2025-10-10, nid=18425 Produktseite:...

CVE-2024-34452

CVE-2024-34452 - Cross-Site Scripting XSS Schwachstelle in CMSimpleXH Übersicht Eine Cross-Site Scripting XSS Schwachstelle wurde in CMSimpleXH Version 1.7.6 identifiziert. Diese Schwachstelle erlaubt autorisierten Benutzern, SVG-Dateien mit schädlichem JavaScript-Code hochzuladen. Das Problem...

CVE-2023-34838

CVE-2023-34838 — XSS persistente nella eScan Management Console Panoramica Microworld Technologies eScan Management Console versione 14.0.1400.2281 è vulnerabile a un attacco di tipo Cross-Site Scripting persistente Stored XSS. Un attaccante autenticato con accesso alla funzione di gestione dei...

CVE-2023-33732

CVE-2023-33732 — Cross-Site Scripting Refletido no Console de Gerenciamento do eScan -orange Visão Geral CVE-2023-33732 é uma vulnerabilidade de Cross-Site Scripting XSS Refletido descoberta no Console de Gerenciamento eScan da Microworld Technologies , versão 14.0.1400.2281. A falha existe no...

CVE-2020-15051

CVE-2020-15051 : Artica Proxy prima della versione 4.28.030418 Community Edition permette Cross Site Scripting Memorizzato. Descrizione del prodotto: Artica Tech offre una soluzione potente ma semplice da usare, solitamente riservata alle grandi aziende e multinazionali. Con un prezzo di partenza...

CVE-2026-47665

Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without any sanitization. Because the backend...

CVE-2026-47665 Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML

Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without any sanitization. Because the backend...

CVE-2025-65300

CVE-2025-65300 Beschreibung CVE-2025-65300: Gespeicherte Cross-Site-Scripting-Schwachstelle XSS in der Coohom-SaaS-Plattform Offenlegungsdatum: 2025-10-28 Zuletzt aktualisiert: 2025-10-28 Reporter: Phisit Pupiw Anbieter: Coohom CWE: CWE-79 – Cross-Site Scripting Zusammenfassung Im Modul...