CVE-2024-31835

CVE-2024-31835 Cross-Site-Scripting-Schwachstelle in flatpress CMS Flatpress v1.3 ermöglicht einem entfernten Angreifer die Ausführung von beliebigem Code über eine präparierte Nutzlast im Dateinamen-Parameter. Betroffene Komponente: FlatPress CMS Admin-Bereich Datei-Upload-Feld Behobene Version:...

CVE-2024-48652

CVE-2024-48652 Vulnerabilità di Cross Site Scripting in camaleon-cms v.2.7.5 consente a un attaccante remoto di eseguire codice arbitrario tramite il campo del nome del gruppo di contenuti Passaggi per la riproduzione: 1.Aprire l'URL: http://127.0.0.1/admin/dashboard 2.Accedere utilizzando le...

CVE-2024-33209

CVE-2024-33209 FlatPress 1.3 ist anfällig für Cross-Site-Scripting XSS. Ein Angreifer kann bösartigen JavaScript-Code in den Bereich „Neuen Eintrag hinzufügen“ einschleusen, wodurch er beliebigen Code im Kontext des Webbrowsers eines Opfers ausführen kann. Vulnerability Type: Cross-Site-Scripting...

CVE-2024-25411

CVE-2024-25411 Una vulnerabilità di cross-site scripting XSS in Flatpress v1.3 consente agli attaccanti di eseguire script web arbitrari o HTML tramite un payload appositamente creato iniettato nel parametro username in setup.php Tipo di vulnerabilità : Cross Site Scripting XSS Vendor del prodott...

TCL-xss-Labs

XSS Lab — The Cyber Ledger 💸 Se questo progetto ti aiuta, considera di supportarlo con una donazione di $10 per farlo crescere. Link: https://rzp.io/rzp/zgkC6h5B Una piattaforma interattiva e auto-ospitata per l'addestramento su XSS con 33 sfide progressivamente più difficili — progettata per...

Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS

CVE-2021-45745 Exploit Title: Bludit 3.13.1 - About Plugin Stored Cross Site Scripting XSS Autore Exploit: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM Riferimenti: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...

nes-vuetify-cve-2025-1461

Vuetify VCalendar XSS-Schwachstellen-POC CVE-2025-1461 Dieses Repository enthält einen Proof of Concept, der die XSS-Schwachstelle in Vuetifys VCalendar-Komponente demonstriert, insbesondere in der Prop eventMoreText. Schwachstellendetails CVE-ID : CVE-2025-1461 Betroffene Versionen : =2.0.0 3.0....

WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin FundEngine versions = 1.8.1...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

xss_vulnerability_challenges

Scenari di vulnerabilità XSS sfide Questo repository è una applicazione PHP dockerizzata contenente alcune sfide di vulnerabilità XSS. Le idee alla base delle sfide sono: Bypass della validazione Javascript Bypass delle entità HTML Bypass WAF Bypass della validazione della black-list Bypass della...

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM Esecuzione di codice remoto tramite impostazione di sistema del file di log e avvelenamento del file di log Panoramica Recentemente ho scoperto due vulnerabilità in SuiteCRM che forniscono una catena di attacco per un utente con privilegi limitati per ottenere l'esecuzione...

Exploit-Medium-CVE-2021-41184

استغلال متوسط CVE-2021-41184 استغلال متوسط CVE-2021-41184 XSS في الخيار of من أداة .position 1. إصدار jQuery UI v1.12.1 قابل للاستغلال 1.1 https://www.website.com/js/jquery/jquery-ui-1.12.1/jquery-ui.min.js -----------------------------------------------إثبات...

Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can...

CVE-2023-2822-demo

CVE-2023-2822-demo Einfache Flask-Anwendung zur Implementierung einer absichtlich verwundbaren Web-App zur Vorführung von CVE-2023-2822. Basiert auf dem Writeup unter...

CVE-2023-34599

CVE-2023-34599 In Gibbon v25.0.0 wurden mehrere Cross-Site-Scripting-Schwachstellen XSS identifiziert, die es Angreifern ermöglichen, beliebigen Javascript-Code auszuführen. Proof of Concept Parameter allUsers http://gibbon.local/index.php?q=/modules/Timetable...

BIT-KEYCLOAK-2026-9086 Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass

A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with manage-client permission or access to client registration endpoints, could bypass client Uniform Resource Identifier URI validation. This is achieved by registering a malicious client with a...

CVE-2022-29455

CVE-2022-29455 Vulnerabilità di Wordpress - XSS Cross-Site Scripting Posizione della vulnerabilità https://add your target here/wp-content/plugins/elementor/assets/js/frontend.min.js Versione vulnerabile Esempio - https://www.youtube.com/watch?v=4qvOkSbhcE...

CVE-2021-26832

CVE-2021-26832 Descrizione suggerita Cross Site Scripting XSS nel modulo della pagina "Reset Password" di Priority Enterprise Management System v8.00 consente agli aggressori di eseguire javascript per conto della vittima inviando un URL dannoso o indirizzando la vittima a un sito dannoso. Tipo d...

CVE-2026-16231

hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaque placeholder during the first render pass, so the double-brace expression escapes only the placeholder, and after rendering hbs substitut...

CVE-2025-56515

CVE-2025-56515 Cross-Site Scripting XSS Schwachstelle in der Fiora Chat-Anwendung CVE-2025-56515: Cross-Site Scripting XSS Schwachstelle in der Fiora Chat-Anwendung Schwachstellenübersicht CVE-ID : CVE-2025-56515 Schwachstellentyp : Cross-Site Scripting XSS Angriffsart : Remote Auswirkung :...