Lucene search
+L

476 matches found

Kitploit
Kitploit
added 2026/09/12 2:00 p.m.7 views

poc-cve-xss-inventory-press-plugin

Update - 6-23-2023 The CVE-2023-2579 ID was reserved and the PoC was published in the WPScan website: https://wpscan.com/vulnerability/3cfcb8cc-9c4f-409c-934f-9f3f043de6fe Details Title: Authenticated Reflected Cross-Site Scripting in InventoryPress Plugin for WordPress CMS Date: 2023-04-21 Autho...

5.4CVSS6.8AI score0.01129EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 12:55 p.m.5 views

CVE-2021-39287-Stored-XSS

CVE-2021-39287-Stored-XSS CVE-2021-39287 Stored XSS in TastyIgniter v3.0.7 Restaurtant CMS A stored Cross Site Scripting XSS vulnerability exists within TastyIgniter v3.0.7 Restaurant CMS. The description input field, located in /admin/locations/settings is not properly sanitized, and allows...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 10:51 a.m.7 views

CVE-2025-45778

CVE-2025-45778 CVE-2025-45778: Authenticated Stored XSS. An authenticated stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary JavaScript or HTML code via injecting a crafted payload into the "Description" text field when...

6.1CVSS5.8AI score0.00314EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 7:31 p.m.5 views

CVE-2025-46041

Anchor CMS v0.12.7 - Stored XSS CVE-2025-46041 Anchor CMS v0.12.7 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the description field of the /admin/pages/add interface. CVE ID CVE-2025-46041 Summary Type: Stored XSS Location: Page creation interface /admin/pages/add Impact:...

5.4CVSS6AI score0.00603EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/11 1:30 p.m.6 views

CVE-2023-43343-Quick-CMS-Stored-XSS---Pages-Files

Quick CMS Stored XSS v6.7 Author: Sergio Description: Multiple Cross-Site Scripting XSS vulnerabilities in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the Files - Description in the Pages Menu. Attack Vectors: Scripting A vulnerability in the...

5.4CVSS6.1AI score0.00677EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 11:50 p.m.6 views

CVE-2025-8191

CVE-2025-8191 – Swagger UI XSS注入 描述 : 此仓库包含针对CVE‑2025‑8191的概念验证(PoC)漏洞利用代码,该漏洞存在于Swagger UI中。 该漏洞允许在“description”字段中进行跨站脚本(XSS)注入,导致在Swagger UI版本≤ 1.0.3下远程执行脚本。 参考文献 : NVD条目: https://nvd.nist.gov/vuln/detail/CVE-2025-8191 使用方法 : root@kitploit: gcc exploit.c argparse.c -o exploit -lcurl ./exploit ...

5.4CVSS5.7AI score0.01702EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/10 7:19 p.m.8 views

CVE-2023-34838

CVE-2023-34838 — eScan Management Console Stored XSS Overview Microworld Technologies eScan Management Console version 14.0.1400.2281 is vulnerable to a Stored Cross-Site Scripting XSS attack. An authenticated attacker with access to the role management feature can inject a malicious script into...

5.4CVSS6AI score0.00813EPSS
SaveExploits1
CVE
CVE
added 2026/09/10 1:05 p.m.11 views

CVE-2026-88868

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is affected by a stored cross-site scripting vulnerability in the LiveLinks plugin . The root cause is that the title and description fields are stored without sanitization. An attacker holding canStream permission can inject maliciou...

9.3CVSS0.00255EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/06 3:47 a.m.7 views

CVE-2026-18741

CVE-2026-18741 - XSS Almacenado en Worksuite SaaS Acerca de CVE-2026-18741 es una vulnerabilidad de XSS almacenado que afecta a Worksuite SaaS en versiones anteriores a la 6.0.14. El problema se encuentra en el módulo de Gestión de Activos. La entrada controlada por el usuario puede almacenarse a...

4.8CVSS5.9AI score0.00148EPSS
SaveExploits1
OSV
OSV
added 2026/09/03 8:59 a.m.15 views

MAL-2026-15878 Malicious code in cbc97b7a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d772b04ff3be605aae9022f0462b9834f488dbb6c1397b7cc1075bb68db63c0 The tarball ships only package.json with no code, scripts, main, or bin. The description field contains a 41KB base64-encoded POSIX shell script that...

5.6AI score
SaveExploits0References7
NVD
NVD
added 2026/08/28 4:17 p.m.14 views

CVE-2026-3423

The Envira Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the gallery 'description' configuration field in all versions up to, and including, 1.12.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00243EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/28 11:29 a.m.13 views

EUVD-2026-67708

The Envira Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the gallery 'description' configuration field in all versions up to, and including, 1.12.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6AI score0.00243EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/03 8:35 p.m.73 views

CVE-2026-49132

OPNsense before 26.1.9 is affected by a stored XSS in the trust certificate API: when an attacker consolidates payloads into a certificate description, the unsanitized value is persisted and later rendered in the Dashboard Certificates widget (Certificates.js) via HTML attribute/text sinks, allow...

5.4CVSS5.6AI score0.0011EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/03 8:35 p.m.51 views

CVE-2026-49132 OPNsense < 26.1.9 Stored XSS via Certificate Description Field

OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary HTML or JavaScript by embedding payloads in the certificate description field via the trust certificate API. The unsanitized description value is persisted and later...

5.4CVSS0.0011EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/14 12:00 a.m.44 views

CVE-2026-38450

An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and description parameter of the Add/Update Project function...

0.01137EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/05 2:00 p.m.50 views

CVE-2026-14754

The CVE covers code-projects Hotel and Tourism Reservation 1.0, where the /admin/add_room.php function is vulnerable. Manipulating the arguments delete_image, edit/description, number, price, rooms, or type can trigger an SQL injection. The attack can be launched remotely, and a public exploit ha...

7.5CVSS6.8AI score0.00431EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/02 2:13 p.m.14 views

PYSEC-2026-730 Plone Cross-site Scripting vulnerability in the LiveSearch module

Cross-site scripting XSS vulnerability in the LiveSearch module in Plone before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the Description field for search results, as demonstrated using the onerror Javascript even in an IMG tag...

4.3CVSS6.1AI score0.01154EPSS
SaveExploits1References8
NVD
NVD
added 2026/06/22 6:16 p.m.28 views

CVE-2026-11994

Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store arbitrary HTML/JavaScript in the description field of a report...

4.8CVSS0.00441EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/22 3:37 p.m.34 views

EUVD-2026-38290

Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store arbitrary HTML/JavaScript in the description field of a report...

4.8CVSS6AI score0.00441EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/19 12:31 a.m.23 views

EUVD-2026-37963

SQL injection in pgAdmin 4 across every dialog template that renders COMMENT ON ... IS '' for a user-supplied description field. The Jinja templates for Domains and their constraints, Foreign Tables, Languages, and Event Triggers, plus the Views OID-lookup query, interpolated the description...

8.8CVSS5.9AI score0.00709EPSS
SaveExploits0References4
Rows per page
Query Builder