CVE-2025-25461

📌 CVE-2025-25461 - SeedDMS 6.0.29 存储型跨站脚本（XSS）漏洞 📝 描述 SeedDMS 6.0.29 中存在一个存储型跨站脚本（XSS）漏洞。 拥有 "添加分类" 权限的用户或恶意管理员可以向分类名称字段注入恶意 XSS 载荷。 当文档随后与该分类关联时，载荷会被存储在服务器上，并在未经过滤或输出编码的情况下渲染。 这导致任何查看文档的用户浏览器执行该 XSS 载荷。 🎯 受影响产品 软件： SeedDMS 版本： 6.0.29 组件： 分类名称字段 ⚠️ 影响 会话劫持 数据泄露 钓鱼攻击 远程代码执行（通过 JavaScript） 🔥...

CVE-2026-30527

A Stored Cross-Site Scripting XSS vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel. The application fails to properly sanitize user input supplied to the "Category Name" field when creating or updating a category. Whe...

CVE-2020-36954

CVE-2020-36954 affects Xeroneit Library Management System 3.1. The vulnerability is a stored cross-site scripting (XSS) in the Book Category feature, where an attacker can inject a payload into the Category Name field and have arbitrary JavaScript execute when the page loads. The exploitation hin...

EUVD-2020-30848

Xeroneit Library Management System 3.1 contains a stored cross-site scripting vulnerability in the Book Category feature that allows administrators to inject malicious scripts. Attackers can insert a payload in the Category Name field to execute arbitrary JavaScript code when the page is loaded...

CVE-2020-36954

Xeroneit Library Management System 3.1 contains a stored cross-site scripting vulnerability in the Book Category feature that allows administrators to inject malicious scripts. Attackers can insert a payload in the Category Name field to execute arbitrary JavaScript code when the page is loaded...

CVE-2021-41731

Cross Site Scripting XSS vulnerability exists in Sourcecodester News247 News Magazine CMS PHP 5.6 or higher and MySQL 5.7 or higher via the blog category name field...

EUVD-2013-1459

Malware in sbrugna...

EUVD-2025-31751

Malicious code in bioql PyPI...

CVE-2025-56018

SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting XSS in Category Management via the category name field...

CVE-2025-56018

SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting XSS in Category Management via the category name field...

CVE-2025-56018

SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting XSS in Category Management via the category name field...

SourceCodester Web-based Pharmacy Product Management System 安全漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source web-based pharmacy product management system. A security vulnerability exists in SourceCodester Web-based Pharmacy Product Management System version V1.0, which stems from insufficient validation of inputs...

CVE-2025-56018

SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting XSS in Category Management via the category name field...

PT-2025-39999

Name of the Vulnerable Software and Affected Versions SourceCodester Web-based Pharmacy Product Management System version 1.0 Description The software is susceptible to Cross Site Scripting XSS within the Category Management feature, specifically through the category name field. This allows for...

CVE-2025-56018

CVE-2025-56018 affects SourceCodester Web-based Pharmacy Product Management System v1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in Category Management via the category name field. Root cause appears to be insufficient validation/sanitization of category name input, enabling script...

CVE-2020-18132

Cross Site Scripting XSS vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit...

SeedDMS 6.0.29 Cross Site Scripting

SeedDMS version 6.0.29 suffers from a cross site scripting vulnerability. 📌 CVE-2025-25461 - Stored Cross-Site Scripting XSS in SeedDMS 6.0.29 📝 Description A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can injec...

Exploit for Cross-site Scripting in Seeddms

📌 CVE-2025-25461 - Stored Cross-Site Scripting XSS in SeedDM...

CVE-2024-25226

A cross-site scripting XSS vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function...

PT-2024-20837 · Unknown · Simple Admin Panel

Name of the Vulnerable Software and Affected Versions: Simple Admin Panel App version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function...