CVE-2025-40626: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in AbanteCart v1.4.0, that could allow an attacker to execute JavaScript code in a victim's browser by sending the victim a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform...

Online Railway Reservation System 1.0 Cross Site Scripting

Exploit Title: Online Railway Reservation System 1.0 - 'Multiple' Stored Cross Site Scripting XSS Unauthenticated Date: 07/01/2022 Exploit Author: Zachary Asher Vendor Homepage: https://www.sourcecodester.com/php/15121/online-railway-reservation-system-phpoop-project-free-source-code.html Softwar...

microlandusa.com XSS vulnerability

Vulnerable URL: http://www.microlandusa.com/microland/aboutus.asp?non=1=1"...