18 matches found
EUVD-2025-21797
Malicious code in bioql PyPI...
EUVD-2025-25182
Malicious code in bioql PyPI...
GHSA-P632-58PP-C9XG moonshine Stored Cross-Site Scripting Vulnerability in Create Article
A stored cross-site scripting XSS vulnerability in the Create Article function of MoonShine v3.12.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Link parameter...
moonshine Stored Cross-Site Scripting Vulnerability in Create Article
A stored cross-site scripting XSS vulnerability in the Create Article function of MoonShine v3.12.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Link parameter...
PT-2025-33738 · Moonshine · Moonshine
Name of the Vulnerable Software and Affected Versions: MoonShine version 3.12.3 Description: A stored cross-site scripting XSS vulnerability exists in the Create Article function. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the Link parameter...
CVE-2025-7748
A vulnerability classified as problematic was found in ZCMS 3.6.0. This vulnerability affects unknown code of the component Create Article Page. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2025-7748 ZCMS Create Article Page cross site scripting
A vulnerability classified as problematic was found in ZCMS 3.6.0. This vulnerability affects unknown code of the component Create Article Page. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2025-7748
The CVE pertains to ZCMS 3.6.0, specifically the Create Article Page component. The vulnerability arises from improper handling of the Title parameter, enabling cross-site scripting (XSS). It is exploitable remotely and is publicly disclosed. Several connected sources corroborate that manipulatin...
CVE-2025-7748 ZCMS Create Article Page cross site scripting
A vulnerability classified as problematic was found in ZCMS 3.6.0. This vulnerability affects unknown code of the component Create Article Page. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2025-7748: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in ZCMS 3.6.0. This vulnerability affects unknown code of the component Create Article Page. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...
PT-2025-29932 · Zcms · Zcms
Name of the Vulnerable Software and Affected Versions: ZCMS version 3.6.0 Description: A problematic issue exists in ZCMS 3.6.0 within the Create Article Page component. Manipulation of the Title argument can lead to cross-site scripting. The attack can be initiated remotely, and the exploit has...
ZVING ZCMS code injection vulnerability
ZVING ZCMS Zeyuan Web Content Management System is an enterprise-level web content management software from China Zeyuan Software ZVING Company. A code injection vulnerability exists in ZVING ZCMS version 3.6.0, which originates from improper handling of the parameter Title in the component Creat...
Alkacon OpenCMS stored cross-site scripting (XSS) vulnerability
A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function...
PT-2025-17320 · Alkacon · Alkacon Opencms
Name of the Vulnerable Software and Affected Versions: Alkacon OpenCMS version 17.0 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function...
PT-2024-35738
Name of the Vulnerable Software and Affected Versions Rbs Image Gallery plugin for WordPress versions up to, and including, 3.2.19 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the rbs ajax create article and rbs ajax reset views...
GHSA-GQGQ-784Q-V9XP FeehiCMS Cross Site Scripting vulnerability
Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page...