Lucene search
+L

5 matches found

NVD
NVD
•added 2026/08/25 10:17 p.m.•13 views

CVE-2026-38472

A Stored XSS vulnerability in forum reward comments in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote attackers to inject arbitrary JavaScript via the c parameter in /forums.php?action=ajaxgetjf which is later rendered in the data-tooltip attribute in...

6.1CVSS0.00403EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/25 12:00 a.m.•9 views

CVE-2026-38472

A Stored XSS vulnerability in forum reward comments in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote attackers to inject arbitrary JavaScript via the c parameter in /forums.php?action=ajaxgetjf which is later rendered in the data-tooltip attribute in...

6.1AI score0.00403EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•4 views

CVE-2026-38472: Improper Neutralization of Input During Web Page Generation

A Stored XSS vulnerability in forum reward comments in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote attackers to inject arbitrary JavaScript via the c parameter in /forums.php?action=ajaxgetjf which is later rendered in the data-tooltip attribute in...

6.1CVSS6AI score0.00403EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•18 views

PT-2026-81871

A Stored XSS vulnerability in forum reward comments in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote attackers to inject arbitrary JavaScript via the c parameter in /forums.php?action=ajax get jf which is later rendered in the data-tooltip attribute in...

5.5AI score0.00403EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/25 12:00 a.m.•40 views

CVE-2026-38472

A Stored XSS vulnerability in forum reward comments in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote attackers to inject arbitrary JavaScript via the c parameter in /forums.php?action=ajaxgetjf which is later rendered in the data-tooltip attribute in...

0.00403EPSS
SaveExploits0References3
Rows per page
Query Builder