CVE-2023-43873-e107-CMS-Stored-XSS---Manage

e107 CMS Stored XSS v2.3.2 Author: Sergio Description: Cross Site Scripting XSS vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Name filed in the Manage Menu. Attack Vectors: Scripting A vulnerability in the sanitization of the entry...

CVE-2025-15703

The HireZoot WordPress plugin versions prior to 4.0.0 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly sanitise and escape one of the job specification settings before it is reflected on an admin-area settings page. This allows users with management cap...

CVE-2025-15703 WP Job Openings < 4.0.0 - Admin+ Stored XSS

The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it is reflected back into an admin-area settings page, allowing users with the HireZoot WordPress plugin before 4.0.0's management capability Administrator by default to store a...

EUVD-2025-211060

The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it is reflected back into an admin-area settings page, allowing users with the HireZoot WordPress plugin before 4.0.0's management capability Administrator by default to store a...

CVE-2021-46080

CVE-2021-46080 Exploit Title: Vehicle Service Management System - 'Multiple' Cross-Site Request Forgery CSRF Leads to Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46080 CVSS: 4.8 MEDIUM References:...

CVE-2025-61638

CVE-2025-61638 node . "https://www.mediawiki.org/w/api.php" fixed More exploitable targets can be found at https://www.mediawiki.org/wiki/SitesusingMediaWiki. https://phabricator.wikimedia.org/T401099 https://vulners.com/cve/CVE-2025-61638 XSS attack requires editing entries, so at least xss !==...

CVE-2020-25270

CVE-2020-25270 PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, City Vendor - PHPGurukul Product -https://phpgurukul.com/hostel-management-system V2.1 Vulnerability Type - Cross Site Scripting XSS Addition Information - XSS wil...

CVE-2021-45745

CVE-2021-45745 Exploit Title: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...

CVE-2024-34070

CVE-2024-34070 Froxlor PoC Python proof of concept for CVE-2024-34070, a stored XSS issue in Froxlor before 2.1.9 through failed login attempts written to the system log. WARNING This project is for authorized security testing, CTF labs, and educational use only. Do not run this against systems y...

CVE-2025-55580

CVE-2025-55580 - SolidInvoice Stored Cross-Site Scripting XSS in Clients Summary SolidInvoice is vulnerable to a Stored Cross-Site Scripting XSS issue in the Client Module. An authenticated attacker can inject arbitrary JavaScript into the application, which will then execute in users' browsers...

CVE-2025-63498

Stored XSS in cookie Alinto/SOGo Researchers: Daniil Khomichenok, Alexander Klimenko Affected Versions var cookieUsername = "[email protected]'123'"; var language = 'English'; var loginHint = '' Code of login remember set-cookie which accepts XSS injections as a paramteter value: if...

CVE-2025-51398

Exploit Title: LiveHelperChat 5. S...

CVE-2025-55579

CVE-2025-55579 - SolidInvoice Stored Cross-Site Scripting XSS in Tax Rates Summary SolidInvoice is vulnerable to a Stored Cross-Site Scripting XSS issue in the Tax Rates Feature. An authenticated attacker can inject arbitrary JavaScript into the application, which will then execute in users'...

DWrwq

Descrip PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting XSS in /admin/updateorder.php. Vulnerability Overview 1.Vulnerability Type: Stored Cross-Site Scripting XSS 2.Affected Product: Online Shopping Portal Project - 2.1 3.Affected Component:...

https-nj.gov---CVE-2018-14041

https-nj.gov---CVE-2018-14041 Vulnearability Report of the New Jersey official site The data-target attribute is vulnerable to Cross-Site Scripting attacks. Test RECOMMENDATION The fix for this specific issue could be changing getTargetFromTrigger function. return $target to: return...

CVE-2020-25399

CVE-2020-25399 Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat. Information Description: Attacker can send malicious file to any user using chat functional. File may contain js payload, which executes in...

CVE-2025-46041

Anchor CMS v0.12.7 - Stored XSS CVE-2025-46041 Anchor CMS v0.12.7 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the description field of the /admin/pages/add interface. CVE ID CVE-2025-46041 Summary Type: Stored XSS Location: Page creation interface /admin/pages/add Impact:...

CVE-2025-57520-Stored-XSS-in-Decap-CMS-3.8.3-

CVE-2025-57520 – Stored XSS in Decap CMS Steps 1. Login as Contributor/Editor low privilege. 2. Create a new blog entry. 3. Insert the payload into one of the vulnerable fields e.g., title. 4. Save the entry. 5. Login as Admin high privilege. 6. Open the entry in Preview. 7. Payload executes in t...

CVE-2025-46173

CVE-2025-46173 - Stored Cross-Site Scripting XSS in Online Exam Mastering System 1.0 📌 Summary CVE-2025-46173 is a stored Cross-Site Scripting XSS vulnerability discovered in the Online Exam Mastering System 1.0 by code-projects. The vulnerability exists in the feedback.php component where user...

CVE-2026-10104-POC

CVE-2026-10104: Stored Cross-Site Scripting in Product Video Gallery for WooCommerce Summary Detail| Value ---|--- CVE ID| CVE-2026-10104 Plugin| Product Video Gallery for WooCommerce Vendor| TechnoSoft Webs NikHiL Gadhiya Type| Stored Cross-Site Scripting XSS CWE| CWE-79 — Improper Neutralizatio...