EUVD-2026-76817

The Custom Menu Wizard Widget WordPress plugin through 3.3.1 does not sanitize and escape several shortcode attributes before rendering them into HTML, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the affected content is viewed...

CVE-2025-56795

CVE-2025-56795 Descripción Se identificaron dos vulnerabilidades de Cross-Site Scripting XSS almacenado en la funcionalidad de creación de recetas de Mealie , afectando a todas las versiones hasta la 3.0.1 inclusive. La entrada de usuario no saneada proporcionada durante la creación de recetas se...

CVE-2025-60374

CVE-2025-60374 CVE-2025-60374: Stored Cross-Site Scripting XSS in Perfex CRM Chatbot ⚠️ Security Advisory A critical Stored Cross-Site Scripting vulnerability in Perfex CRM's chatbot feature 📋 Overview A stored cross-site scripting XSS vulnerability in the chatbot component of Perfex CRM, prior to...

CVE-2020-35262

CVE-2020-35262: Stored XSS in Digisol DG-HR3400 Router Vulnerability Description It has been identified that the vulnerable endpoint doesn't have server side input validation and lacks client side filtering for any malicious script injection. An attacker can use this vulnerability to inject...

CVE-2025-65675

CVE-2025-65675 Vulnerabilidad de Cross-Site Scripting XSS Almacenado en Classroomio LMS 0.1.13 que permite a atacantes autenticados ejecutar código arbitrario a través de imágenes de perfil SVG manipuladas. Descubierto por - Rivek Raj Tamang RivuDon, Sikkim, India. Producto afectado: ClassroomIO...

POC_CVE-2024-40492

CVE-2024-40492：存储型XSS导致账户接管 描述 存储型跨站脚本（XSS）是一种常见于Web应用程序的安全漏洞。当攻击者能够将恶意脚本注入Web应用程序，并且这些脚本存储在服务器上时，就会发生这种情况。当其他用户访问包含恶意脚本的数据时，该脚本会在他们的浏览器中执行。 复现步骤 1. 访问 https://app.heartbeat.chat/ 2. 使用以下详细信息创建账户： 名字： root@kitploit: giongfnef"test" 姓氏： root@kitploit: giongfnef" 3. 进入“Threads”，然后搜索名字 giongfnef -...

CVE-2026-89268

QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value attributes without escaping them in the list helper template. Attackers can induce authenticated users to submit crafted POST requests with malicious payloads to list controllers, executing arbitrary...

EUVD-2026-76773

QloApps through 1.7.0 renders back-office list filter POST parameters into HTML input value attributes without escaping them in the list helper template. Attackers can induce authenticated users to submit crafted POST requests with malicious payloads to list controllers, executing arbitrary...

CVE-2026-15253

CVE-2026-15253 Easy Media Replace = 0.2.0 - Authenticated Author+ Stored Cross-Site Scripting Description The Easy Media Replace plugin is vulnerable to a Stored Cross-Site Scripting XSS via the media attachment title. When an Author renames a media file using an XSS payload and an Admin or Edito...

CVE-2019-12475

CVE-2019-12475 Stored XSS in MicroStrategy Web prior to 10.4.6 Author: undefinedmode https://github.com/undefinedmode/CVE-2019-12453 Stored XSS in metric and it is triggered when opening the Visual Threshold editor. Reported to vendor in 2017 and fixed quickly in version 10.4.6...

CVE-2026-54165 Stored DOM-XSS in public shared-folder image gallery (one-click, unauthenticated victim)

Dobase is an open-source, self-hosted workspace with installable tools. Versions prior to 2026.06.03 have a one-click stored DOM-based cross-site scripting XSS vulnerability in the public, unauthenticated shared-folder image gallery. A file's name is fully attacker-controlled and is never...

CVE-2026-54165

Dobase , an open-source self-hosted workspace, is affected by a one-click stored DOM-based XSS in its public shared-folder image gallery. The root cause is that a file's name attribute is fully attacker-controlled and never sanitized; it is round-tripped through an ERB-escaped data-name attribute...

CVE-2026-79294

CVE-2026-79294 CVE-2026-79294 — Stored XSS in Moonshot AI Kimi's HTML artifact Preview, delivered through the public Share view, leading to session token exfiltration and demonstrated account takeover. Responsible disclosure advisory. CVE-2026-79294 Stored XSS in Moonshot AI Kimi's HTML artifact...

CVE-2024-20405

描述 Cisco Finesse 基于 Web 的管理接口存在一个漏洞，允许未经身份验证的远程攻击者通过利用 RFI 漏洞执行存储型 XSS 攻击。此漏洞是由于对发送到受影响设备的特定 HTTP 请求的用户输入验证不足所致。攻击者可以通过诱使用户点击精心设计的链接来利用此漏洞。成功利用后，攻击者可以在受影响接口的上下文中执行任意脚本代码，或访问受影响设备上的敏感信息。 概念验证 PoC 1. 创建一个与原始方案路径相同的完整路径。 root@kitploit: mkdir cuicui && mkdir cuicui/gadget && mkdir...

CVE-2026-5513

CVE-2026-5513 — Bookly ≤ 27.2 XSS Almacenado a través de Cookie Resumen...

CVE-2026-81918

Concrete CMS versions below 9.5.3 are affected by a Stored XSS vulnerability in the Date Format field of the Page Attribute Display block . A user holding edit_page_contents permissions can store a payload that executes in the browser of any visitor who views a page where the block is configured ...

EUVD-2026-76690

Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block. A user with editpagecontents permissions could store a payload which executes in the browser of any visitor who viewed a page where the block was configured to display a date-type...

CVE-2026-81918 Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block

Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block. A user with editpagecontents permissions could store a payload which executes in the browser of any visitor who viewed a page where the block was configured to display a date-type...

EUVD-2026-76689

Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in the browser of any visitor to a page displaying the block...

CVE-2026-81917

Concrete CMS versions below 9.5.3 contain a Stored XSS vulnerability in the Document Library block . The block controller returned the file description and tags values without applying the h() HTML-escaping function (already used for the title column), and the block view template wrote those valu...