Lucene search
K

1180640 matches found

NVD
NVD
added 1 hour ago2 views

CVE-2026-11534

A vulnerability was detected in imvks786 studentmanagementsystem up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Affected by this issue is some unknown functionality of the file /add.php. The manipulation of the argument name/address/fname results in cross site scripting. It is possible to launch...

5.1CVSS
Exploits0References6
CVE
CVE
added 1 hour ago3 views

CVE-2026-11534

A vulnerability was detected in imvks786 studentmanagementsystem up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Affected by this issue is some unknown functionality of the file /add.php. The manipulation of the argument name/address/fname results in cross site scripting. It is possible to launch...

5.1CVSS4AI score
Exploits0References6
EUVD
EUVD
added 1 hour ago1 views

EUVD-2026-35132

A vulnerability was detected in imvks786 studentmanagementsystem up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Affected by this issue is some unknown functionality of the file /add.php. The manipulation of the argument name/address/fname results in cross site scripting. It is possible to launch...

5.1CVSS
Exploits0References6
CVE
CVE
added 2 hours ago4 views

CVE-2026-29170

CVE-2026-29170 is a cross-site scripting vulnerability in Apache HTTP Server up to 2.4.67 within mod_proxy_ftp’s HTML directory list generation, affecting listings served via forward or reverse proxy. The issue lies in how directory contents are rendered, enabling XSS when an attacker controls th...

5.2AI score
Exploits0References1
NVD
NVD
added 2 hours ago2 views

CVE-2026-29170

A cross-site scripting vulnerability exists in modproxyftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

Exploits0References1
NVD
NVD
added 3 hours ago3 views

CVE-2026-25558

QloApps through 1.7.0 contains a stored cross-site scripting vulnerability in the admin file manager that allows authenticated administrators to inject malicious JavaScript by uploading crafted SVG files. Attackers can embed JavaScript event handlers such as onload within SVG files uploaded throu...

4.8CVSS
Exploits0References2
NVD
NVD
added 3 hours ago4 views

CVE-2026-11518

A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipulation of the argument fullname/username leads to cross site scripting. The attack is possible to be carried out remotely...

5.3CVSS
Exploits0References6
NVD
NVD
added 3 hours ago4 views

CVE-2026-11520

A weakness has been identified in SourceCodester Inventory System 1.0. Affected by this issue is some unknown functionality of the file header.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and...

5.1CVSS
Exploits0References5
EUVD
EUVD
added 3 hours ago3 views

EUVD-2026-35087

A cross-site scripting vulnerability exists in modproxyftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration. Users are recommended to upgrade to version 2.4.68, which fixes this issue...

5.2AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 3 hours ago2 views

CVE-2026-11436

A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the file mageai/frontend/components/Sessions/SignForm/index.tsx of the component Sign-in Flow. Performing a manipulation of the argument query.redirecturl results in cross site scripting. Remote...

5.3CVSS4AI score0.00033EPSS
Exploits0References1
GithubExploit
GithubExploit
added 3 hours ago10 views

xss-defense-system

No d...

5.4AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 4 hours ago3 views

CVE-2026-25558

QloApps through 1.7.0 contains a stored cross-site scripting vulnerability in the admin file manager that allows authenticated administrators to inject malicious JavaScript by uploading crafted SVG files. Attackers can embed JavaScript event handlers such as onload within SVG files uploaded throu...

4.8CVSS5.5AI score
Exploits0References3
CVE
CVE
added 4 hours ago9 views

CVE-2026-25558

CVE-2026-25558 affects QloApps up to version 1.7.0. The issue is a stored cross-site scripting flaw in the admin file manager, permitting an authenticated administrator to inject malicious JavaScript by uploading crafted SVG files. Attackers can embed event handlers (e.g., onload) in SVGs uploade...

4.8CVSS5.5AI score
Exploits0References2
Cvelist
Cvelist
added 4 hours ago4 views

CVE-2026-25558 QloApps 1.7.0 Stored XSS via SVG File Upload in Admin File Manager

QloApps through 1.7.0 contains a stored cross-site scripting vulnerability in the admin file manager that allows authenticated administrators to inject malicious JavaScript by uploading crafted SVG files. Attackers can embed JavaScript event handlers such as onload within SVG files uploaded throu...

4.8CVSS
Exploits0References2
EUVD
EUVD
added 4 hours ago3 views

EUVD-2026-35071

QloApps through 1.7.0 contains a stored cross-site scripting vulnerability in the admin file manager that allows authenticated administrators to inject malicious JavaScript by uploading crafted SVG files. Attackers can embed JavaScript event handlers such as onload within SVG files uploaded throu...

4.8CVSS5.5AI score
Exploits0References2
Cvelist
Cvelist
added 4 hours ago5 views

CVE-2026-11520 SourceCodester Inventory System header.php cross site scripting

A weakness has been identified in SourceCodester Inventory System 1.0. Affected by this issue is some unknown functionality of the file header.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and...

5.1CVSS
Exploits0References5
CVE
CVE
added 4 hours ago7 views

CVE-2026-11520

Summary: CVE-2026-11520 affects SourceCodester Inventory System 1.0, with the vulnerability in the header.php file enabling cross-site scripting. The issue can be triggered remotely and multiple parameters may be affected. Public exploit material exists. The connected records confirm the vulnerab...

5.1CVSS3.9AI score
Exploits0References5
ATTACKERKB
ATTACKERKB
added 4 hours ago2 views

CVE-2026-11520

A weakness has been identified in SourceCodester Inventory System 1.0. Affected by this issue is some unknown functionality of the file header.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and...

5.1CVSS3.9AI score
Exploits0References6Affected Software1
EUVD
EUVD
added 4 hours ago3 views

EUVD-2026-35070

A weakness has been identified in SourceCodester Inventory System 1.0. Affected by this issue is some unknown functionality of the file header.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and...

5.1CVSS3.9AI score
Exploits0References5
CVE
CVE
added 4 hours ago8 views

CVE-2026-11518

SourceCodester Inventory System 1.0 is affected by a cross-site scripting vulnerability in the User Management page (file /users.php). The issue arises from manipulation of the fullname/username arguments, enabling remote, user-initiated XSS. Public exploit is referenced. The available documents ...

5.3CVSS3.7AI score
Exploits0References6
Rows per page
Query Builder