Lucene search
+L

357 matches found

RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.9 views

CVE-2025-58211

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Stored XSS.This issue affects Chatbox Manager: from n/a through = 1.2.6...

6.5CVSS5.9AI score0.00165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/27 5:45 p.m.2 views

CVE-2025-58211 WordPress Chatbox Manager Plugin <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Stored XSS.This issue affects Chatbox Manager: from n/a through = 1.2.6...

6.5CVSS5.9AI score0.00165EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/27 5:45 p.m.17 views

CVE-2025-58211 WordPress Chatbox Manager Plugin <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Stored XSS.This issue affects Chatbox Manager: from n/a through = 1.2.6...

6.5CVSS0.00165EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/27 5:45 p.m.18 views

CVE-2025-58211

CVE-2025-58211 covers a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Chatbox Manager (versions up to and including 1.2.6). The issue arises from improper neutralization of input during web page generation, resulting in a stored XSS that can affect users who view vulnerable pag...

6.5CVSS5.9AI score0.00165EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/27 12:00 a.m.26 views

CVE-2025-55422

FoxCMS 1.2.6 contains a reflected Cross Site Scripting (XSS) vulnerability in the /index.php/plus endpoint. The issue is documented across multiple feeds (CVE-2025-55422) and is treated as a reflected XSS with high impact on confidentiality, integrity, and availability (per CVSS v3.1: AV:N/AC:L/P...

8.8CVSS6.1AI score0.00415EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/27 12:00 a.m.10 views

PT-2025-34922 · Unknown · Alexvtn Chatbox Manager

Name of the Vulnerable Software and Affected Versions: alexvtn Chatbox Manager versions through 1.2.6 Description: The software contains a Stored Cross-Site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts...

6.5CVSS5.7AI score0.00165EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/08/27 12:00 a.m.9 views

FoxCMS 安全漏洞

FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS company. A security vulnerability exists in FoxCMS version 1.2.6, which originates from improper handling of /index.php/plus, and could lead to a reflective cross-site scripting attack...

8.8CVSS6AI score0.00415EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/08/27 12:00 a.m.5 views

CVE-2025-55422

In FoxCMS 1.2.6, there is a reflected Cross Site Scripting XSS vulnerability in /index.php/plus...

5.6AI score0.00415EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/08/27 12:00 a.m.25 views

CVE-2025-55422

In FoxCMS 1.2.6, there is a reflected Cross Site Scripting XSS vulnerability in /index.php/plus...

0.00415EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/25 4:15 p.m.10 views

CVE-2025-55409

FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article. This allows attackers to execute arbitrary code...

8.8CVSS0.00493EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/25 4:15 p.m.9 views

CVE-2025-55409

FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article. This allows attackers to execute arbitrary code...

8.8CVSS6AI score0.00493EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/08/25 12:00 a.m.10 views

PT-2025-34666 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: FoxCMS version 1.2.6 Description: FoxCMS version 1.2.6 contains a Cross Site Scripting issue in the /index.php/article endpoint. This allows attackers to execute arbitrary code. Recommendations: As a temporary workaround, consider restricting...

8.8CVSS6.7AI score0.00493EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/08/25 12:00 a.m.23 views

CVE-2025-55409

FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article. This allows attackers to execute arbitrary code...

0.00493EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/08/25 12:00 a.m.11 views

FoxCMS 安全漏洞

FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS company. A security vulnerability exists in FoxCMS version 1.2.6, which originates from the presence of cross-site scripting in index.phpparticle, which may lead to the execution of arbitrary code...

8.8CVSS6.3AI score0.00493EPSS
SaveExploits1References3
NVD
NVD
added 2025/08/21 4:15 p.m.13 views

CVE-2025-55420

A Reflected Cross Site Scripting XSS vulnerability was found in /index.php in FoxCMS v1.2.6. When a crafted script is sent via a GET request, it is reflected unsanitized into the HTML response. This permits execution of arbitrary JavaScript code when a logged-in user submits the malicious input...

8.8CVSS0.00493EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/08/21 12:00 a.m.12 views

PT-2025-34231 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: FoxCMS version 1.2.6 Description: A Reflected Cross Site Scripting XSS vulnerability exists in the /index.php endpoint of the software. When a crafted script is sent via a GET request, it is reflected unsanitized into the HTML response,...

8.8CVSS6.4AI score0.00493EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/08/21 12:00 a.m.10 views

FoxCMS 安全漏洞

FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS. A security vulnerability exists in FoxCMS v1.2.6, which stems from a reflective cross-site scripting vulnerability that could lead to the execution of arbitrary JavaScript code...

8.8CVSS6.2AI score0.00493EPSS
SaveExploits1References2
CNVD
CNVD
added 2025/08/20 12:00 a.m.5 views

WordPress plugin Blogger Buzz cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Blogger Buzz 1.2.6 and previous versions of cross-site scripting vulnerability , the...

6.5CVSS6.4AI score0.00204EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/16 11:25 a.m.13 views

CVE-2025-54680

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sparklewpthemes Blogger Buzz blogger-buzz allows Stored XSS.This issue affects Blogger Buzz: from n/a through = 1.2.6...

6.5CVSS5.9AI score0.00204EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/14 10:34 a.m.20 views

CVE-2025-54680 WordPress Blogger Buzz Theme theme <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sparklewpthemes Blogger Buzz blogger-buzz allows Stored XSS.This issue affects Blogger Buzz: from n/a through = 1.2.6...

6.5CVSS0.00204EPSS
SaveExploits0References1
Rows per page
Query Builder