CVE-2025-44108-SXSS

CVE-2025-44108 - FlatPress CMS 1.3.1 中的存储型跨站脚本（XSS）漏洞 描述 Flatpress CMS 1.3.1 的管理面板中存在一个存储型跨站脚本（XSS）漏洞。拥有管理员权限的攻击者可以向系统注入恶意的 JavaScript 载荷，该载荷会被持久化存储。 当普通用户访问被攻破的页面（例如一篇博客文章）时，注入的载荷会在受害者浏览器中自动执行。 受影响产品 Flatpress 版本： 上传器 - 图库说明文字中，您可以编辑图片的说明文字，注入载荷并保存。当网站访客或管理员访问博客文章时，存储型 XSS 将被触发。 root@kitploit: 1...

prosey

Prosey Prosey 是一个 CLI 工具，用于下载并显示 YouTube 视频的文字转录，让你无需浪费数小时就能获取所需信息。 主要使用场景包括： 总结 YouTube 视频并在 CLI 中通过单条命令显示（更快）。 阅读 视频字幕，按原视频章节格式化并组织（通常需要更多时间）。 两种用法都需要你系统上有一个 AI 助手（默认：opencode，使用 prosey config 配置你自己的）。 如果我们检测到你系统上有语法高亮器，你将获得漂亮的彩色输出。 Prosey 也可以原样输出或存储原生 JSON 格式。 功能特性 功能| 描述 ---|--- 💡 总结| 获取并总结视频...

EUVD-2026-82473

Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text...

CVE-2026-77615

Paella Player is a set of libraries to create a multi stream video player. Prior to Paella Player 2.12.11 as used in Opencast prior to 19.7 and 20.2, there is a potential XSS attack though closed captions cue text. This vulnerability is fixed in 2.12.11...

CVE-2026-88914

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

Linux Distros Unpatched Vulnerability : CVE-2026-88914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an...

CVE-2026-88914

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

DRUPAL-CONTRIB-2026-131

This module enables you to add dynamic caption support to PhotoSwipe image galleries. The module doesn't sufficiently sanitize user-supplied input such as image alt tags in its dynamic caption script, leading to a Cross-Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact...

pocyeah

An open-source project from Pillar Security PocYeah Turn...

NPM: Ghost: Cross-Site Scripting in Feature Image Captions

NPM: Ghost: Cross-Site Scripting in Feature Image Captions vulnerability discovered by ? in WordPress Npm ghost versions = 4.9.0, 6.54.1...

GHSA-PR22-P9RP-2CQV Ghost: Cross-Site Scripting in Feature Image Captions

Impact An input validation issue allowed any staff user to create a post with content that could be used to hijack another staff user's Ghost Admin session resulting in privilege escalation. Vulnerable versions This vulnerability is present in Ghost from v4.9.0 up to v6.54.0. Patches v6.54.1...

Ghost: Cross-Site Scripting in Feature Image Captions

Impact An input validation issue allowed any staff user to create a post with content that could be used to hijack another staff user's Ghost Admin session resulting in privilege escalation. Vulnerable versions This vulnerability is present in Ghost from v4.9.0 up to v6.54.0. Patches v6.54.1...

EUVD-2026-53391

Ghost is a Node.js content management system. From 4.9.0 until 6.54.1, an input validation issue allowed any staff user to create a post with content in featureimagecaption that could be used to hijack another staff user's Ghost Admin session, resulting in privilege escalation. This issue is fixe...

CVE-2026-70596 Ghost: Cross-Site Scripting in Feature Image Captions

Ghost is a Node.js content management system. From 4.9.0 until 6.54.1, an input validation issue allowed any staff user to create a post with content in featureimagecaption that could be used to hijack another staff user's Ghost Admin session, resulting in privilege escalation. This issue is fixe...

CVE-2026-70596

Ghost (Node.js CMS) is affected from versions 4.9.0 through 6.54.1 by an input validation issue in feature_image_caption that could be exploited by a staff user to hijack another staff user’s Ghost Admin session, enabling privilege escalation. The issue is fixed in 6.54.1. The provided metrics in...

CVE-2026-14833

The Lightbox with PhotoSwipe WordPress plugin before 5.9.0 does not sanitise or escape a link data attribute before rendering it into the image lightbox caption in the browser, allowing users with author-level access and above who lack the unfilteredhtml capability to store JavaScript that runs...

pocumentary

An open-source project from Pillar Security PoCumentary T...

CVE-2026-11581

The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.13 does not sanitise a form field's caption before outputting it as a column header on the administrator form-entries screen, allowing users with Contributor-level access or above to store JavaScript that executes i...

GO-2026-5540 SiYuan: Remote Code Execution in the Electron desktop client via stored XSS in synced table captions in github.com/siyuan-note/siyuan/kernel

SiYuan: Remote Code Execution in the Electron desktop client via stored XSS in synced table captions in github.com/siyuan-note/siyuan/kernel...

CVE-2026-41318

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.12.1, AnythingLLM's in-chat markdown renderer has an unsafe custom rule for images that interpolates the markdown image's alt text into an HTML alt="..."...