Lucene search
K

7 matches found

OSV
OSV
added 2026/04/01 10:6 p.m.5 views

GHSA-R33W-C82V-X5V7 CI4MS: Blogs Posts (Categories) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

Summary Vulnerability: Blogs Posts Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS - Stored Cross-Site Scripting via Unsanitized Blog Post Content in Blog Management Categories Description The application fails to properly sanitize user-controlled input wh...

9.1CVSS6.2AI score0.00269EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2025-26651

Malicious code in bioql PyPI...

4.8CVSS4AI score0.00284EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/09/05 10:26 p.m.8 views

CVE-2025-9929

A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogsview.php. Executing manipulation of the argument productcode/genname/productname/supplier can lead to cross site scripting. It is possible to launch the attack remotely. The...

4.8CVSS5.7AI score0.00284EPSS
Exploits1References1
OSV
OSV
added 2025/09/04 10:42 a.m.6 views

CVE-2025-9929

A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogsview.php. Executing manipulation of the argument productcode/genname/productname/supplier can lead to cross site scripting. It is possible to launch the attack remotely. The...

4.8CVSS4.2AI score
Exploits0References5
CNNVD
CNNVD
added 2025/09/04 12:0 a.m.3 views

Code-Projects Responsive Blog Site 代码注入漏洞

Code-Projects Responsive Blog Site is a Code-Projects open source responsive blog site. Code-Projects Responsive Blog Site version 1.0 suffers from a code injection vulnerability that stems from improper manipulation of the parameters productcode/genname/productname/supplier in the file...

4.8CVSS4.1AI score0.00284EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/09/03 9:32 p.m.2 views

CVE-2025-9929 code-projects Responsive Blog Site blogs_view.php cross site scripting

A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogsview.php. Executing manipulation of the argument productcode/genname/productname/supplier can lead to cross site scripting. It is possible to launch the attack remotely. The...

4.8CVSS5.4AI score0.00284EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.12 views

PT-2025-35837

Name of the Vulnerable Software and Affected Versions: code-projects Responsive Blog Site version 1.0 Description: A weakness exists in code-projects Responsive Blog Site 1.0, affecting an unknown function within the blogs view.php file. Manipulation of the product code, gen name, product name, o...

4.8CVSS2.9AI score0.00284EPSS
Exploits1References8
Rows per page
Query Builder