CVE-2024-6651

CVE-2024-6651 POC XSS - CVE-2024-6651 Functional PoC for vulnerability CVE-2024-6651, which affects the plugin WP File Upload 4.24.8, allowing Reflected Cross-Site Scripting XSS in WordPress. 📌 Description This vulnerability allows arbitrary JavaScript code injection via an unsanitized parameter ...

CVE-2025-34157

Stored XSS in Coolify delete flow CVE-2025-34157 Affects: Coolify ≤ v4.0.0-beta.420.6 Fixed in: v4.0.0-beta.420.7 Severity: Critical 9.4 CVSS 4.0 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE: CWE-79 Cross-Site Scripting, CWE-20 Improper Input Validation Summary A...

CVE-2025-29471

Stored XSS Vulnerability in Nagios Log Server Privilege Escalation to Admin ▶️ PoC Demo Date: 2025-04-02 Exploit Author: Seth Kraft Vendor Homepage: https://www.nagios.com/ Vendor Changelog: https://www.nagios.com/changelog/log-server Software Link:...

htmlpurifier

HTML Purifier HTML Purifier is an HTML filtering solution that uses a unique combination of robust whitelists and aggressive parsing to ensure that not only are XSS attacks thwarted, but the resulting HTML is standards compliant. HTML Purifier is oriented towards richly formatted documents from...

TYPO3-HTML-Sanitizer-XSS-CVE-2023-47125

Stored XSS exploit in TYPO3 HTML Sanitizer CVE-2023-47125 Description DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. Vuln versions = 1.0.0, = 2.0.0,...

TCL-xss-Labs

XSS Lab — The Cyber Ledger 💸 If this project helps you, consider supporting it with a $10 donation to keep it growing. Link: https://rzp.io/rzp/zgkC6h5B An interactive, self-hosted XSS training platform with 33 progressively harder challenges — designed for hackers, pentesters, and developers who...

PT-2026-120950

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password plugin. Error text returned by a password driver was concatenated into the message presented to the user without HTML escaping, so a backend able to influence that text, such...

ezXSS

ezXSS is an easy way for penetration testers and bug bounty hunters to test blind Cross Site Scripting. ezXSS is a tool that is designed to help find and exploit cross-site scripting XSS vulnerabilities. One of the key features of ezXSS is its ability to identify and exploit blind XSS...

tbhm

The Bug Hunter's Methodology TBHM Welcome! This repo is a collection of tips tricks tools data analysis and notes related to web application security assessments and more specifically towards bug hunting in bug bounties. The current sections are divided as follows: Before You Get Hacking Learning...

XSSYA

XSSYA-V2.0 has been Released - check https://github.com/yehia-mamdouh/XSSYA-V-2.0 XSSYA is a Cross Site Scripting Scanner & Vulnerability Confirmation Working in two Methods • Method number 1 for Confirmation Request and Response • Method number 2 for Confirmation Execute encoded payload and sear...

dorkX

dorkX Pipe different tools with google dork Scanner Version 1.0 Install zoid@MSI /dorkX git clone https://github.com/ethicalhackingplayground/dorkX zoid@MSI /dorkX cd dorkX zoid@MSI /dorkX go build dorkx.go zoid@MSI /dorkX go build corsx.go zoid@MSI /dorkX go build csrfx.go zoid@MSI /dorkX go bui...

CVE-2025-68116

CVE-2025-68116 Author: @x0root Vulnerability: Stored Cross-Site Scripting XSS via Browser-Renderable Uploads SVG / HTML Affected Software: FileRise Note: GHSA-qrcv-vjvf-fr29 introduced a mitigation that prevented SVGs from rendering inside the FileRise web UI preview pane. This report documents a...

CVE-2025-55816

CVE-2025-55816 CVE-2025-55816 HotelDruid 3.0.7 Author: partywave Collab: Raptx team External references HotelDruid 3.0.8 changelog CVE blogpost Raptx site Vulnerability The vulnerability is a simple Stored Cross Site Scripting XSS in /modificaapp.php endpoint. The attacker can insert a javascript...

jsprime

Authors Nishant Das Patnaik nishant.dp@ Sarathi Sabyasachi Sahoo sarathisahoo@ Introduction Today, more and more developers are switching to JavaScript as their first choice of language. The reason is simple JavaScript has now been started to be accepted as the mainstream programming for...

xsshunter-express

XSS Hunter Express Sets up in 5 minutes and requires no maintenance The fastest way to set up XSS Hunter to test and find blind cross-site scripting vulnerabilities. Setup Five minutes, try not to skim too much Requirements docker and docker-compose installed Host with at least 2 GB of RAM A...

CVE-2020-3580

CVE-2020-3580 Cisco ASA / FTD reflected XSS in the WebVPN SAML SP ACS endpoint /+CSCOE+/saml/sp/acs. Patched in cisco-sa-asaftd-xss-multiple-FCB3vPZe. This repo contains: xss.html — a human-verifiable PoC for authorized targets. src/ — a discovery + scope-aware validation pipeline. docs/ —...

CVE-2026-76303

In Splunk SOAR versions below 8.7.0 , a Stored Cross-Site Scripting (XSS) vulnerability exists because the application fails to sanitize app documentation content. An attacker with the install_apps capability can install an app containing malicious content. If a user with permission to view apps ...

CVE-2026-50980

CVE-2026-50980: DNS-Based Cross-Site Scripting XSS & Session Hijacking in oPanel Overview CVE ID: CVE-2026-50980 Product: oPanel Affected Versions: v1.20.25 Vulnerability Type: Stored Cross-Site Scripting XSS via DNS / Session Hijacking Severity: High CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N...

CVE-2025-59057-PoC

A XSS vulnerability exists in in React Router's meta/ APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag...

CVE-2024-42009

CVE-2024-42009 – Roundcube Stored XSS Docker PoC 📌 Overview This repository demonstrates a working Proof-of-Concept PoC for CVE-2024-42009 , a stored Cross-Site Scripting XSS vulnerability in Roundcube Webmail. The vulnerability is caused by improper HTML sanitization followed by unsafe attribute...