CVE-2025-25461

📌 CVE-2025-25461 - ثغرة تخزين البرمجة النصية عبر المواقع XSS في SeedDMS 6.0.29 📝 الوصف توجد ثغرة تخزين البرمجة النصية عبر المواقع XSS في SeedDMS 6.0.29. يمكن لمستخدم أو مسؤول مارق لديه صلاحية "إضافة تصنيف" حقن حمولة XSS ضارة في حقل اسم التصنيف. عند ربط مستند بهذا التصنيف لاحقًا، يتم تخزين الحمولة...

CVE-2026-30527: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel. The application fails to properly sanitize user input supplied to the "Category Name" field when creating or updating a category. Whe...

CVE-2026-30527

A Stored Cross-Site Scripting XSS vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel. The application fails to properly sanitize user input supplied to the "Category Name" field when creating or updating a category. Whe...

CVE-2020-36954

Xeroneit Library Management System 3.1 contains a stored cross-site scripting vulnerability in the Book Category feature that allows administrators to inject malicious scripts. Attackers can insert a payload in the Category Name field to execute arbitrary JavaScript code when the page is loaded...

EUVD-2020-30848

Xeroneit Library Management System 3.1 contains a stored cross-site scripting vulnerability in the Book Category feature that allows administrators to inject malicious scripts. Attackers can insert a payload in the Category Name field to execute arbitrary JavaScript code when the page is loaded...

CVE-2020-36954

CVE-2020-36954 affects Xeroneit Library Management System 3.1. The vulnerability is a stored cross-site scripting (XSS) in the Book Category feature, where an attacker can inject a payload into the Category Name field and have arbitrary JavaScript execute when the page loads. The exploitation hin...

CVE-2021-41731

Cross Site Scripting XSS vulnerability exists in Sourcecodester News247 News Magazine CMS PHP 5.6 or higher and MySQL 5.7 or higher via the blog category name field...

EUVD-2013-1459

Malware in sbrugna...

EUVD-2025-31751

Malicious code in bioql PyPI...

CVE-2025-56018

SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting XSS in Category Management via the category name field...

CVE-2025-56018

SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting XSS in Category Management via the category name field...

CVE-2025-56018

SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting XSS in Category Management via the category name field...

PT-2025-39999

Name of the Vulnerable Software and Affected Versions SourceCodester Web-based Pharmacy Product Management System version 1.0 Description The software is susceptible to Cross Site Scripting XSS within the Category Management feature, specifically through the category name field. This allows for...

SourceCodester Web-based Pharmacy Product Management System 安全漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source web-based pharmacy product management system. A security vulnerability exists in SourceCodester Web-based Pharmacy Product Management System version V1.0, which stems from insufficient validation of inputs...

CVE-2025-56018

The SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross-Site Scripting (XSS) within the Category Management feature. The root cause is the insufficient validation of inputs provided to the category name field , which allows for the injection and execution of ma...

CVE-2025-56018: Improper Neutralization of Input During Web Page Generation

SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting XSS in Category Management via the category name field...

CVE-2025-56018

SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting XSS in Category Management via the category name field...

CVE-2020-18132

Cross Site Scripting XSS vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit...

CVE-2025-25461: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server an...

SeedDMS 6.0.29 Cross Site Scripting

SeedDMS version 6.0.29 suffers from a cross site scripting vulnerability. 📌 CVE-2025-25461 - Stored Cross-Site Scripting XSS in SeedDMS 6.0.29 📝 Description A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can injec...