31 matches found
CVE-2026-30527
A Stored Cross-Site Scripting XSS vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel. The application fails to properly sanitize user input supplied to the "Category Name" field when creating or updating a category. Whe...
EUVD-2020-30848
Xeroneit Library Management System 3.1 contains a stored cross-site scripting vulnerability in the Book Category feature that allows administrators to inject malicious scripts. Attackers can insert a payload in the Category Name field to execute arbitrary JavaScript code when the page is loaded...
CVE-2020-36954
CVE-2020-36954 affects Xeroneit Library Management System 3.1. The vulnerability is a stored cross-site scripting (XSS) in the Book Category feature, where an attacker can inject a payload into the Category Name field and have arbitrary JavaScript execute when the page loads. The exploitation hin...
CVE-2020-36954
Xeroneit Library Management System 3.1 contains a stored cross-site scripting vulnerability in the Book Category feature that allows administrators to inject malicious scripts. Attackers can insert a payload in the Category Name field to execute arbitrary JavaScript code when the page is loaded...
CVE-2021-41731
Cross Site Scripting XSS vulnerability exists in Sourcecodester News247 News Magazine CMS PHP 5.6 or higher and MySQL 5.7 or higher via the blog category name field...
EUVD-2013-1459
Malware in sbrugna...
EUVD-2025-31751
Malicious code in bioql PyPI...
CVE-2025-56018
SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting XSS in Category Management via the category name field...
CVE-2025-56018
SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting XSS in Category Management via the category name field...
CVE-2025-56018
SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting XSS in Category Management via the category name field...
CVE-2025-56018
SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting XSS in Category Management via the category name field...
SourceCodester Web-based Pharmacy Product Management System ๅฎๅ จๆผๆด
SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source web-based pharmacy product management system. A security vulnerability exists in SourceCodester Web-based Pharmacy Product Management System version V1.0, which stems from insufficient validation of inputs...
CVE-2025-56018
CVE-2025-56018 affects SourceCodester Web-based Pharmacy Product Management System v1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in Category Management via the category name field. Root cause appears to be insufficient validation/sanitization of category name input, enabling script...
PT-2025-39999
Name of the Vulnerable Software and Affected Versions SourceCodester Web-based Pharmacy Product Management System version 1.0 Description The software is susceptible to Cross Site Scripting XSS within the Category Management feature, specifically through the category name field. This allows for...
CVE-2020-18132
Cross Site Scripting XSS vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category name field to categoryEdit...
SeedDMS 6.0.29 Cross Site Scripting
SeedDMS version 6.0.29 suffers from a cross site scripting vulnerability. ๐ CVE-2025-25461 - Stored Cross-Site Scripting XSS in SeedDMS 6.0.29 ๐ Description A Stored Cross-Site Scripting XSS vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can injec...
Exploit for Cross-site Scripting in Seeddms
๐ CVE-2025-25461 - Stored Cross-Site Scripting XSS in SeedDM...
CVE-2024-25226
A cross-site scripting XSS vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function...
PT-2024-20837 ยท Unknown ยท Simple Admin Panel
Name of the Vulnerable Software and Affected Versions: Simple Admin Panel App version 1.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter under the Add Category function...