CVE-2025-11926

CVE-2025-11926 Wordpress-Related-Posts-Lite-plugin-XSS-PoC for PoC: https://github.com/prabhatverma47/Wordpress-Related-Posts-Lite-plugin-XSS-PoC...

CVE-2025-31864

CVE-2025-31864 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Beam me up Scotty – Back to Top Button Vulnerable version = 1.0.23 Component slug beam-me-up-scotty Component link https://wordpress.org/plugins/beam-me-up-scotty/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3:...

cpanel_xss_2023

About the Tool ⚒️ cpanelxss2023 is a simple Python script designed for finding CVE-2023-29489 vulnerability and exploitability in cpanel. Features ⚙️ CVE-2023-29489 Scanning: Identifies and scans for the CVE-2023-29489 vulnerability and exploitation. URL Input: Supports scanning a single URL or...

apache__sling-org-apache-sling-xss_CVE-2016-5394_1-0-8

Apache Sling XSS Bundle The Apache Sling XSS Bundle provides two services for escaping and filtering XSS-prone user submitted content: 1. org.apache.sling.xss.XSSAPI 2. org.apache.sling.xss.XSSFilter Please check the JavaDoc of each service to find out what methods they provide...

xss_vulnerability_challenges

Escenarios de Vulnerabilidad XSS desafíos Este repositorio es una aplicación PHP Dockerizada que contiene algunos desafíos de vulnerabilidad XSS. Las ideas detrás de los desafíos son: Bypass de validación de JavaScript Bypass de entidades HTML Bypass de WAF Bypass de validación de lista negra...

CVE-2024-37383-POC

CVE-2024-37383-POC Proof of concept for CVE-2024-37383 Introduction This repository contains a proof of concept for the XSS vulnerability in roundcube: CVE-2024-37383. More information about this vulnerability can be found: here Steps Start Roundcube If you don't have an instance of roundcube...

CVE-2021-25791-Multiple-Stored-XSS

CVE-2021-25791-Multiple-Stored-XSS : Multiple Stored XSS Online Doctor Appointment System Multiple stored aunthenticated cross-site scripting exists in the Online Doctor Appointment System V1.0 Software Link:...

CVE-2019-1759-csrf-js-rce

CVE-2019-1759 Bolt-cms 3.6.10 Csrf - xss - rce Watch the video...

CVE-2016-10993

CVE-2016-10993 Wordpress Vulnerability - XSS Cross-Site Scripting Vulnerability Location https://themesinfo.com/scoreme-wordpress-theme-design-496 Proof of Concept PoC https://example.com/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E Refrensi...

CVE-2025-30349

Horde IMP vulnerability – obfuscation via HTML encoding – XSS payload Horde 5.2.23; IMP 6.2.27 The details of the vulnerability are explained in Details.md file. The PoC creates and send an email with payload exploiting the vulnerability to the recipient. This kind of email has to be viewed in a...

CVE-2024-49379

Proof of Concept PoC for CVE-2024-49379 This repository contains a Python-based Proof of Concept PoC for a critical vulnerability identified in UmbrelOS. The vulnerability allows for Cross-Site Scripting XSS, which can escalate to Remote Code Execution RCE under specific conditions. Overview CVE ...

CVE-2024-42009

CVE-2024-42009 PoC: Email Capture Listener & XSS Exploit Overview This Proof of Concept PoC demonstrates an exploit for CVE-2024-42009, leveraging a cross-site scripting XSS vulnerability to extract emails from a target webmail application. The attack injects a malicious payload that exfiltrates...

CVE-2023-30212-POC-DOCKER-FILE

CVE-2023-30212 POC : Cross-Site Scripting via /client/manage/ourphpout.php Products Affected By CVE-2023-30212 : Vendor| Product| Version ---|---|--- ourphp| ourphp| 7.2.0 Docker Installation Guide : To install OURPHP alertxss" Steps to Reproduce the issue: After completing the setup of the docke...

CVE-2023-50132

CVE-2023-50132 Suggested description Sourcecodester School Visitor Log e-book v1.0 is vulnerable to Cross Site Scripting XSS. Additional Information youtube link: https://youtu.be/W7Oen8rs64 Vulnerability Type Cross Site Scripting XSS Vendor of Product https://www.sourcecodester.com/ Affected...

CVE-2024-40512

CVE-2024-40512 Cross Site Scripting vulnerability in openPetra v.2023.02 via the serverMReporting.asmx function. Description : An unauthenticated user can steal cookies from authenticated user, by exploiting a XSS in openPetra v.2023.02 via the serverMReporting.asmx function. Vulnerable Product...

CVE-2023-46998

Cross Site Scripting in Bootbox.js v.3.2 thru 6.0 allows a remote attacker to to inject HTML code and execute arbitrary JavaScript. Summary Vendor: BootBox Product: bootbox.js Affected versions: 3.2 to 6.0 CodeName: Venga-Que-Si-Es-Pa-Eso Vulnerability Type: Improper Neutralization of Input Durin...

CVE-2023-36159

CVE-2023-36159 Cross Site Scripting XSS vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page...

CVE-2024-52318

CVE-2024-52318 🚨🚨CVE-2024-52318 - Apache Tomcat XSS Vulnerability in Generated JSPs🚨🚨 Overview CVE-2024-52318 is a crosssite scripting XSS vulnerability in Apache Tomcat, which arises from improperly released resources in generated JavaServer Pages JSPs. This issue, introduced by a prior...

EUVD-2026-96888

open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.writelogfile in oscomputeruse/logging.py, which writes transcript text into log.html without HTML escaping. Attackers controlling sandbox content, such as web pages or files appearing in...

CVE-2024-25411

CVE-2024-25411 A cross-site scripting XSS vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter in setup.php Vulnerability Type : Cross Site Scripting XSS Vendor of Product :...