CVE-2026-47106 Ellucian Banner Self-Service Stored XSS via getFacultyMeetingTimes API

Ellucian Banner Self-Service before the April T2 release 2025-04-23 contains a stored cross-site scripting vulnerability in the course search functionality that allows authenticated Banner ERP users to inject malicious payloads into faculty and course fields by exploiting missing HTML encoding...

CVE-2025-64070

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

EUVD-2025-200277

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

CVE-2025-64070

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

CVE-2025-64070

The Sourcecodester Student Grades Management System v1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw. The vulnerability is located in the Add New Subject Description field, where improper neutralization of input during web page generation allows for the execution of malicious scripts. Whil...

CVE-2025-64070

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

CVE-2025-64070: Improper Neutralization of Input During Web Page Generation

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

PT-2025-48725

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

CVE-2025-64070

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting XSS in the Add New Subject Description field...

CVE-2025-60304

code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...

EUVD-2025-33359

code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...

CVE-2025-60304

code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...

CVE-2025-60304

code-projects Simple Scheduling System 1.0 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input within the Subject Description field, which allows for the injection of malicious scripts into the application. To remediate this, it is recommended to u...

CVE-2025-60304

code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...

CVE-2025-60304: Improper Neutralization of Input During Web Page Generation

code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...

CVE-2025-60304

code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...

PT-2025-41444

Name of the Vulnerable Software and Affected Versions code-projects Simple Scheduling System version 1.0 Description The Simple Scheduling System is susceptible to Cross Site Scripting XSS through the Subject Description field. This allows for the injection of malicious scripts into the...

Code-Projects Simple Scheduling System 安全漏洞

Code-Projects Simple Scheduling System is an open source simple scheduling system from Code-Projects. A security vulnerability exists in Code-Projects Simple Scheduling System version 1.0, which stems from the vulnerability of the Subject Description field to cross-site scripting attacks...

PT-2024-21166 · Sourcecodester · Sourcecodester Insurance Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Insurance Management System version 1.0 Description: A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket. This enables attackers to...