CVE-2025-26527 Non-searchable tags can still be discovered on the tag search page and in the tags block

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...

Moodle 安全漏洞

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from tags not being properly hidden, where a user may find tags that...

PT-2025-7783 · Red Os · Red Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A security issue allows users to discover tags that are not expected to be visible to them. This can occur through the tag search page or in the tags block. Recommendations: At the moment,...

coolLabs Coolify Cross-Site Scripting Vulnerability

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. coolLabs Coolify suffers from a cross-site scripting vulnerability that stems from allowing a user to search for tags on a tabbed page, and if the search does not return any results, the query is reflected in an error...

CVE-2025-24025 Coolify Vulnerable to Reflected XSS on Tag Search

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.380, the tags page allows users to search for tags. If the search does not return any results, the query gets reflected on the error modal, which leads to cross-site...

CVE-2025-24025

CVE-2025-24025 affects Coolify versions prior to 4.0.0-beta.380. The issue arises on the tags search page: when a search yields no results, the query is reflected in the error modal, resulting in a cross-site scripting (XSS) vulnerability. The root cause is the reflective handling of user input o...

CVE-2025-24025 Coolify Vulnerable to Reflected XSS on Tag Search

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.380, the tags page allows users to search for tags. If the search does not return any results, the query gets reflected on the error modal, which leads to cross-site...

Coolify 安全漏洞

Coolify is an open source and self-hosted alternative to Heroku/Netlify/Vercel. coolLabs Coolify suffers from a cross-site scripting vulnerability that stems from allowing a user to search for tags on a tabbed page, and if the search does not return any results, the query is reflected in an error...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the search by tag feature due to missing sanitization on the server side when the tag doesn't exist. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a...

PT-2025-5261

Name of the Vulnerable Software and Affected Versions YesWiki versions up to and including 4.4.5 Description The vulnerability allows any end-user to craft a DOM based XSS on all of YesWiki's pages, which is triggered when a user clicks on a malicious link. This issue makes use of the search by t...

CVE-2012-1161

Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+ affected...

Design/Logic Flaw

Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results...

CVE-2012-1161

Summary of CVE-2012-1161 (Moodle) : Affected Moodle installations before 2.2.2 are vulnerable to a course information leak where hidden courses appear in tag search results. The issue is a disclosure in the course listing mechanism, with an impact described asPartial confidentiality loss (NVD CVS...

CVE-2018-7318

SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the titlesearch, tagsearch, namesearch, descriptionsearch, or filterorder parameter...

moreofit.com XSS vulnerability

Vulnerable URL: http://www.moreofit.com/tag-search/?q=x...

timberland.txt

There's a vulnerability in Timberland's search engine. The variable 'keywords' in searchHandler/index.jsp is not correctly sanitized. URL: hxxp://www.timberland.com/searchHandler/index.jsp?keywords=XSS Code Example: hxxp://www.timberland.com/searchHandler/index.jsp?keywords=alert'test'; Author: O...