CVE-2023-50880

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in The BuddyPress Community BuddyPress allows Stored XSS.This issue affects BuddyPress: from n/a through 11.3.1...

Ulicms 2023.1 sniffing-vicuna - Stored Cross-Site Scripting Vulnerability

Exploit Title: Ulicms-2023.1 sniffing-vicuna - Stored Cross-Site Scripting XSS Application: Ulicms Version: 2023.1-sniffing-vicuna Bugs: Stored Xss Technology: PHP Vendor URL: https://en.ulicms.de/ Software Link:...

CVE-2013-7370

node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware...

quan.coderschool.cn XSS vulnerability

Open Bug Bounty ID: OBB-554250 Description| Value ---|--- Affected Website:| quan.coderschool.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

barbershopconvention.com.au XSS vulnerability

Open Bug Bounty ID: OBB-481390 Description| Value ---|--- Affected Website:| barbershopconvention.com.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

savoryspiceshop.com XSS vulnerability

Open Bug Bounty ID: OBB-448328 Description| Value ---|--- Affected Website:| savoryspiceshop.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

CubeCart 3.0.20 (3.0.x) and lower | Multiple Cross Site Scripting Vulnerabilities

OVERVIEW CubeCart 3.0.20 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful...

Unfixed XSS vulnerability at search.enjoyie.com

Security researcher Blast, has submitted on 09/11/2008 a cross-site-scripting XSS vulnerability affecting search.enjoyie.com, which at the time of submission ranked 1810399 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/11/2008. It is...