6 matches found
WordPress Soledad Theme <= 8.6.7 is vulnerable to Cross Site Scripting (XSS)
Software Soledad Type Theme Vulnerable versions = 8.6.7 Fixed in 8.6.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2025-8143 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2b64551fa293 Credits stealthcopter Required privilege...
PT-2025-29834 · Emlog · Emlog
Name of the Vulnerable Software and Affected Versions: Emlog versions up to and including 2.5.17 Description: Emlog is an open source website building system susceptible to a cross-site scripting XSS issue. A malicious actor with authentication can inject arbitrary web script or HTML via the...
ebdbook.vn Cross Site Scripting vulnerability OBB-4040711
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-25629 · Unknown · Transfer.Sh
Name of the Vulnerable Software and Affected Versions: Transfer.sh versions 1.4.0 and prior Description: The issue is related to Cross Site Scripting XSS and can be triggered via a malicious document uploaded in transfer.sh. There is no information about the estimated number of potentially affect...
publications.goettingen-research-online.de Cross Site Scripting vulnerability OBB-2896308
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2020-29471
OpenCart 3.0.3.6 is affected by cross-site scripting XSS in the Profile Image. An admin can upload a profile image as a malicious code using JavaScript. Whenever anyone will see the profile picture, the code will execute and XSS will trigger...