CVE-2025-70128: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability exists in the PluXml article comments feature for PluXml versions 5.8.22 and earlier. The application fails to properly sanitize or validate user-supplied input in the "link" field of a comment. An attacker can inject arbitrary JavaScript code using...

CVE-2025-70129

If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically recognized for articles, such that an automated script is able to solve this anti-spam mechanism trivially and publish spam comments. T...

EUVD-2021-17159

Malware in sbrugna...

CVE-2021-30227

Cross Site Scripting XSS vulnerability in the article comments feature in emlog 6.0...

PT-2025-15278 · Typecho · Typecho

Name of the Vulnerable Software and Affected Versions: Typecho version 1.2.1 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under a comment for an Article. Recommendations: For Typecho...

PT-2024-34419 · Unknown · Hopetree Izone Lts

Name of the Vulnerable Software and Affected Versions: hopetree izone lts version c011b48 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the article comment function. Specifically, the AddCommintView function in appscommentviews.py does not securely filter user...

CVE-2023-36222

Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the comment parameter in the article function...

CVE-2020-19294

A stored cross-site scripting XSS vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section...

CVE-2020-19294

A stored cross-site scripting XSS vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section...

CVE-2020-19294

A stored cross-site scripting XSS vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section...

Jeesns 跨站脚本漏洞

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the article comment section...

CVE-2021-30227

Cross Site Scripting XSS vulnerability in the article comments feature in emlog 6.0...

CVE-2021-30227

Cross Site Scripting XSS vulnerability in the article comments feature in emlog 6.0...

CVE-2021-30227

Cross Site Scripting XSS vulnerability in the article comments feature in emlog 6.0...

Cross site scripting

Cross Site Scripting XSS vulnerability in the article comments feature in emlog 6.0...

CVE-2021-30227

Cross Site Scripting XSS vulnerability in the article comments feature in emlog 6.0...

CVE-2021-30227

Cross Site Scripting XSS vulnerability in the article comments feature in emlog 6.0...

CVE-2021-30227: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in the article comments feature in emlog 6.0...

PT-2021-18674

Name of the Vulnerable Software and Affected Versions emlog version 6.0 Description The issue is related to a Cross Site Scripting XSS vulnerability in the article comments feature. Recommendations For emlog version 6.0, update to a newer version that contains a fix for this issue...

Cross site scripting

The way comments in article.php vulnerable function in include/functions-article.php are handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored Blind XSS injecting arbitrary web script or HTML in admin/manage-comments.php, via the GET parameter cmt...