Lucene search
K

7 matches found

NVD
NVD
added 2026/03/27 4:16 p.m.5 views

CVE-2026-30527

A Stored Cross-Site Scripting XSS vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel. The application fails to properly sanitize user input supplied to the "Category Name" field when creating or updating a category. Whe...

5.4CVSS0.00229EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/03/27 12:0 a.m.21 views

CVE-2026-30527

A Stored Cross-Site Scripting XSS vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel. The application fails to properly sanitize user input supplied to the "Category Name" field when creating or updating a category. Whe...

0.00229EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.5 views

PT-2025-44992

Name of the Vulnerable Software and Affected Versions Orbit Fox Companion versions up to and including 3.0.2 Description The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to...

6.4CVSS5.8AI score0.00218EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-10583

Malware in sbrugna...

5.4CVSS5.5AI score0.0073EPSS
Exploits2References2
Packet Storm
Packet Storm
added 2025/08/26 12:0 a.m.166 views

📄 Pharmacy Product Management System 1.0 Cross Site Scripting

Pharmacy Product Management System version 1.0 suffers from a persistent cross site scripting vulnerability. Exploit Title: Pharmacy Product Management System - Persistent XSS Date: 25.08.2025 Exploit Author: Ömer Ahmet Yılmaz Vendor Homepage:...

6.6AI score
Exploits0
OSV
OSV
added 2025/02/07 11:15 p.m.10 views

CVE-2025-1114

A vulnerability classified as problematic has been found in newbee-mall 1.0. Affected is the function save of the file /admin/categories/save of the component Add Category Page. The manipulation of the argument categoryName leads to cross site scripting. It is possible to launch the attack...

5.4CVSS3.8AI score0.00311EPSS
Exploits1References5
OSV
OSV
added 2024/04/27 4:15 p.m.2 views

CVE-2024-4256

A vulnerability was found in Techkshetra Info Solutions Savsoft Quiz 6.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /public/index.php/Qbank/editCategory of the component Category Page. The manipulation of the argument categoryname with the inpu...

4.8CVSS3.7AI score0.00519EPSS
Exploits1References3
Rows per page
Query Builder