2 matches found
CVE-2026-16485
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /class.php. Such manipulation of the argument day leads to cross site scripting. The attack can be launched remotely. The exploit has been...
5.3CVSS0.00273EPSS
SaveExploits0References6
CVE-2021-39357
The Leaky Paywall WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the /class.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.16.5. This affec...
4.8CVSS5.8AI score0.00886EPSS
SaveExploits1References3
20