CVE-2026-105694

The open-source design and prototyping platform Penpot is vulnerable to Stored XSS in versions prior to 2.18.0 . Authenticated users with file-edit permission can upload SVG media containing unsanitized scripts, event-handler attributes, and foreignObject elements. Because these files are served ...

CVE-2026-105679

The Ghost Node.js content management system is vulnerable to Stored XSS in versions 6.22.1 through 6.64.0 . The root cause is that the restriction on content types for uploaded files is not applied when using the default local storage adapter , allowing files to be served with content types deriv...

CVE-2026-105679 Ghost: Stored XSS via File Uploads on Local Storage

Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...

CVE-2026-105651

The Ghost Node.js content management system (versions 5.94.0 through 6.64.0 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. When creating a bookmark card, the system could fetch and store non-image files from external websites as icons or thumbnails. This allowed staff users, includi...

CVE-2026-105650

The Ghost Node.js content management system (versions 2.1.0 through 6.64.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists because embedding a URL from an attacker-controlled website can cause untrusted scripts to be stored within post content. These scripts can execute in ...

CVE-2026-105649

The Ghost Node.js content management system is vulnerable to Stored Cross-Site Scripting (XSS) in versions 4.22.0 through 6.65.0 . The root cause is a lack of sanitization for SVG media thumbnails and SVG images uploaded using non-SVG file extensions. This flaw allows any staff user, including Co...

CVE-2026-105644

The Ghost Node.js content management system is vulnerable to Stored XSS in versions 4.0.0 through 6.67.0 . The root cause is the lack of sanitization for SVG images included during content imports. An attacker could trick an Administrator into importing a crafted file, enabling the execution of s...

CVE-2026-105643

The Ghost Node.js content management system (versions 6.34.0 through 6.67.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) via embed cards in the editor. This flaw allows any staff user, such as a Contributor , to embed malicious scripts in post content. When another staff user opens that p...

CVE-2026-42700

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GhozyLab Image Slider Widget image-slider-widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.130...

CVE-2023-43354-CMSmadesimple-Stored-XSS---MicroTIny-extension

CMSmadesimple ストアドXSS v2.2.18 著者: Sergio 説明: CMSmadesimple v.2.2.18 におけるクロスサイトスクリプティングの脆弱性により、ローカルの攻撃者が細工したスクリプトを「拡張 - MicroTiny WYSIWYGエディタ」のプロフィールに送信することで、任意のコードを実行できる可能性があります。 攻撃ベクター: 「MicroTiny WYSIWYGエディタ」のプロフィール入力に対するサニタイズの脆弱性により、ユーザーがWebページにアクセスした際に実行されるJavaScriptコードを注入できるようになります。 POC:...

CSPOC

Cobalt Strike 格納型XSS RCE CVE-2022-39197 実行パラメータ： -u: Cobaltstrike HTTPリスニングアドレス（例：http://127.0.0.1:8500） -p: ペイロード（例：）長すぎないこと デモ： ビルドコマンド：go build -ldflags "-s -w" QQグループ： クリックして参加：528118163 グループ参加 / 協力 / 連絡（左） | 公式アカウント：遮天实验室（右）...

CVE-2021-24807

CVE-2021-24807 Support Board 3.3.4 認証済み保存型XSS Support Board バージョン3.3.4には、Notesパラメータを介した認証済み保存型クロスサイトスクリプティング（XSS）の脆弱性が存在します。...

CVE-2026-100509 WordPress RepairBuddy plugin <= 4.1225 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Stored XSS.This issue affects RepairBuddy: from n/a through 4.1225...

EUVD-2026-92580

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Stored XSS.This issue affects RepairBuddy: from n/a through 4.1225...

CVE-2026-100509

The RepairBuddy (computer-repair-shop) WordPress plugin, developed by Webful Creations , is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects version 4.1225 and all preceding versions. Exploitation of thi...

CVE-2023-4220-exploit

CVE-2023-4220-exploit Chamilo LMS バージョン = 1.11.24 の /main/inc/lib/javascript/bigupload/inc/bigUpload.php における大容量ファイルアップロード機能の無制限なファイルアップロードにより、認証されていない攻撃者が格納型クロスサイトスクリプティング攻撃を実行し、Webシェルをアップロードすることでリモートコード実行を取得できます。 PoC bash CVE.2023-4220.sh -f webshell -u URL -l puerto...

AdTran-Personal-Phone-Manager-Vulns

AdTran-Personal-Phone-Manager-Vulns CVE-2021-25679、CVE-2021-25680、CVE-2021-25681 のゼロデイ解説記事を公開するリポジトリです。 概要 CVE-2021-25679: Adtran Personal Phone Manager のメールアドレス変更フォームにおける認証された保存型XSS CVE-2021-25680: Adtran Personal Phone Manager における複数の反射型XSS CVE-2021-25681: AdTran Personal Phone Manager におけるDNS情...

CVE-2026-105630

The Plane project management tool is vulnerable to Stored XSS in versions prior to 1.4.0 . An authenticated low-privilege user, such as a Guest, can upload an image/svg+xml file as an attachment. Because the file retains its attacker-controlled Content-Type and the asset-download endpoint provide...

CVE-2026-105630 Plane: Stored XSS via SVG attachment served inline on the application origin (account takeover)

Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, including a Guest, can upload an image/svg+xml file as a generic or issue attachment. The file retains the attacker-controlled Content-Type, and the asset-download endpoint creates a...

CVE-2022-31300

CVE-2022-31300 Haraj Script 3.7 - DMセクション 認証済みストアドXSS エクスプロイトタイトル: Haraj Script 3.7 - 認証済みストアドXSS 日付: 2022-06-13 CVE: CVE-2022-31300 エクスプロイト作者: Abdulaziz Saad @b4zb0z ベンダーホームページ: https://angtech.org/ ソフトウェアリンク: https://angtech.org/product/view/3 バージョン: 3.7 テスト環境: LAMP, Ubuntu エクスプロイト手順:...