CVE-2018-7747

CVE-2018-7747 CalderaForms 1.5.9.1 XSS WordPress plugin - tutorial CalderaForm is a WordPress plugin that makes it easy to create forms via drag and drop. During a recent engagement I happened to test some portals, one of which hosted a contact form created with this plugin. The custom...

CVE-2026-11959

The software FacturaScripts , version 2025.61 , is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient validation or sanitization of user input. The flaw exists in the 'city' and 'province' fields within the 'ListAlmacen' endpoint. An attacker can exploit this to execute arbitrary...

CVE-2026-11959 Multiple vulnerabilities in FacturaScripts

Stored Cross-Site Scripting XSS in FacturaScripts, version 2025.61, caused by a lack of adequate validation or sanitisation of user input in the ‘city’ and ‘province’ fields in the ‘ListAlmacen’ endpoint. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary...

CVE-2026-110725

A flaw was found in fast-uri. A remote attacker could exploit this vulnerability to trigger cross-site scripting XSS by providing crafted input to applications that serialize or normalize relative Uniform Resource Identifiers URIs using the suffix reference option. Because the library fails to...

CVE-2026-110306

A flaw was found in fast-uri. The library incorrectly decodes percent-encoded characters in protocol schemes prior to validation, causing invalid or prohibited schemes to be accepted as valid. A remote attacker can exploit this vulnerability by submitting a specially crafted Uniform Resource...

CVE-2026-113465

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in Stormshield’s web administration panel . An attacker can execute malicious scripts by crafting a URL containing a payload within a specific parameter and tricking an authenticated administrator into visiting it. The impact involves hi...

CVE-2026-113465 Possible DOM XSS in SNS Web Administration Portal

It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to craft a URL containing a malicious script payload within a specific parameter and lure an authenticated administrator into...

CVE-2026-27472-and-CVE-2026-27474

CVE-2026-27472 and CVE-2026-27474 CVSS-B 5.3 MEDIUM and CVSS-B 4.8 MEDIUM Blind SSRF in SPIP 4.4.8 Syndication Feature and stored XSS Explanations and more on my website PoC 1. Log in as an administrator. 2. Make sure that in the Site content configuration, Sites referencing and syndication is on...

bugbounty-cheatsheet

Bug Bounty Cheat Sheet 📚 Reference| 🔎 Vulnerabilities ---|--- Bug Bounty Platforms| XSS Books| SQLi Special Tools| SSRF Recon| CRLF Injection Practice Platforms| CSV Injection Bug Bounty Tips| LFI | XXE | RCE | Open Redirect | Crypto | Template Injection | Content Injection | XSLT Injection...

CVE-2026-66418-OpenClaw-Dashboard-v3.0.0-Stored-XSS-via-Failed-Login-Username-Field

Security Advisory: Unauthenticated Stored Cross-Site Scripting Leading To Administrator Account Takeover openclaw-dashboard Title: OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field Assigned CVE ID: CVE-2026-66418 Target Repository:...

CVE-2025-56605

CVE-2025-56605 XSS Cross-Site Scripting Vulnerability CVE-2025-56605 — Reflected XSS in Event Management System 1.0 Description: A reflected Cross-Site Scripting XSS vulnerability exists in register.php of PuneethReddyHC/event-management 1.0. The mobile POST parameter is improperly validated and...

PwnXSS

A powerful XSS scanner made in python 3.7 Installing Requirements: BeautifulSoup4 pip install bs4 requests pip install requests python 3.7 Commands: git clone https://github.com/pwn0sec/PwnXSS chmod 755 -R PwnXSS cd PwnXSS python3 pwnxss.py --help Usage Basic usage: python3 pwnxss.py -u...

CVE-2026-110306

fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, fast-uri percent-decodes the scheme component with the legacy global unescape function before validating it, so an input whose decoded...

awesome-oneliner-bugbounty

Awesome One-liner Bug Bounty A collection of awesome one-liner scripts especially for bug bounty. This repository stores and houses various one-liner for bug bounty tips provided by me as well as contributed by the community. Your contributions and suggestions are heartily♥ welcome. Definitions...

CVE-2026-110306

The fast-uri Node.js URI parser and serializer is vulnerable to URI scheme spoofing in versions before 2.4.8, 3.0.0 through 3.1.8, and 4.0.0 through 4.2.2. The root cause is that the library uses the legacy global unescape() function to percent-decode the scheme component before validation. This ...

EUVD-2026-104814

fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, fast-uri percent-decodes the scheme component with the legacy global unescape function before validating it, so an input whose decoded...

CVE-2023-43326

mooSocial: XSS CVE-2023-43326 A reflected cross-site scripting XSS vulnerability exisits in multiple url of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Note: XXS Also works when these URLs are used in Referer Header. The...

CVE-2026-93878 DiviGear Carousel <= 5.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via update_license AJAX Action

The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via updatelicense AJAX Action in all versions up to, and including, 5.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level...

CVE-2026-93878

The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.2.0 . The root cause is insufficient input sanitization and output escaping within the update_license AJAX Action. This allows authenticated attackers with subscribe...

WordPress DiviGear Carousel plugin <= 5.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Austin Ginder in WordPress Plugin DiviGear Carousel versions = 5.2.0...