6155 matches found
CVE-2017-7038
CVE-2017-7038 Safari XSS（CVE-2017-7038）https://support.apple.com/en-us/HT207923 Document 实现 XSS 漏洞 var payload = ''; document.createElement'body'.innerHTML = payload; document.implementation.createHTMLDocument.writepayload; new DOMParser.parseFromStringpayload, 'text/html'; var xhr = new...
CVE-2021-24891-Simulation
一个实践性的、容器化的实验室环境，用于模拟和利用 Elementor Website Builder WordPress 插件中的基于 DOM 的跨站脚本（XSS）漏洞，标识为 CVE-2021-24891。 📖 关于该漏洞 该实验室演示了 WordPress Elementor 插件（版本低于 3.4.8）中的一个基于 DOM 的跨站脚本（XSS） 漏洞。该漏洞的产生是因为 Elementor 编辑器的客户端代码直接从 URL 的哈希（...）中读取数据，并将其附加到页面的文档对象模型（DOM）中，而没有进行适当的清理。 攻击者可以构造一个恶意链接，在哈希片段中包含 JavaScrip...
WordPress All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin <= 5.0.1.1 - Reflected DOM-Based Cross-Site Scripting vulnerability
Reflected DOM-Based Cross-Site Scripting vulnerability discovered by mak3bread in WordPress Plugin All In One SEO Pack versions = 5.0.1.1...
WordPress Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting vulnerability
Reflected DOM-Based Cross-Site Scripting vulnerability discovered by UKO in WordPress Plugin Calculated Fields Form versions = 5.5.1.5...
WordPress Visitor Traffic Real Time Statistics plugin <= 8.16 - Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability
Unauthenticated Stored DOM-Based Cross-Site Scripting vulnerability discovered by Kuba in WordPress Plugin Visitors Traffic Real Time Statistics versions = 8.16...
CVE-2021-42558
CVE-2021-42558: Múltiples Cross-Site Scripting en MITRE Caldera Caldera versiones =2.8.1 contiene múltiples vulnerabilidades XSS reflejadas, almacenadas y propias que pueden ser explotadas por atacantes autenticados y no autenticados. Divulgación del proveedor: La divulgación del proveedor para...
burp-dom-scanner
Burp DOM Scanner これは、シングルページアプリケーションの再帰的なクローリングとスキャンを可能にするBurp Suiteの拡張機能です。 Chromiumブラウザを実行して、WebページのDOMベースのXSSをスキャンします。 また、クローリング中に発行されたすべてのリクエスト（XHR、fetch、websocketsなど）を収集し、BurpのProxy、Repeater、Intruderに転送することができます。 これにはnodeとDOMDigが必要です。 ダウンロード 最新のリリースはこちらからダウンロードできます。 インストール 1. nodeをインストールします ...
burp-dom-scanner
Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...
CVE-2026-97341
The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header in all versions up to, and including, 8.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2026-103909
The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'arbitrary whichever names the admin bound via url.' parameter in all versions up to, and including, 5.5.1.5 due...
EUVD-2026-91920
The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header in all versions up to, and including, 8.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2026-92538
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'orderby' parameter in all versions up to, and including, 4.4.7 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-92538 LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'orderby' parameter in all versions up to, and including, 4.4.7 due to insufficient input sanitization and output escaping. This makes it...
EUVD-2026-91895
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'orderby' parameter in all versions up to, and including, 4.4.7 due to insufficient input sanitization and output escaping. This makes it...
VDO.Ninja - DOM-Based Cross-Site Scripting
VDO.Ninja 28.0 to 28.3 contains a reflected XSS caused by improper sanitization of the room parameter in examples/control.html, letting remote attackers execute scripts, exploit requires crafted URL. id: CVE-2025-62613 info: name: VDO.Ninja - DOM-Based Cross-Site Scripting author: 0xAkoko severit...
Hoppscotch <= 2026.2.1 - Open Redirect
Hoppscotch = 2026.2.1 is vulnerable to a DOM-based open redirect on the /enter page. The redirect query parameter is passed directly to windowz location.href with no origin validation. Requires one additional query parameter to trigger. Exploited via a crafted URL such as...
NoXss
NoXss NoXss は、反射型XSSとDOMベースXSSに対応したクロスサイトスクリプト脆弱性スキャナです。非常に高速で、数百万のURLのテストに適しています。バグバウンティプログラムでいくつかのXSS脆弱性を発見実績があります。 特徴 高速で数百万のURLのテストに適しています DOMベースXSS（ChromeまたはPhantomjsを使用）と反射型XSSに対応 現在は注入位置に基づく8つのペイロードのみを使用（ファジングではなく、より正確かつ高速） 非同期リクエスト（gevent使用）とマルチプロセス処理 単一URL、ファイル、Burpsuiteからのトラフィックに対応...
CVE-2022-45472
CVE-2022-45472 基于DOM的XSS 软件：CAE Learning Space Enterprise（含Intuity许可证） 镜像版本：267r 补丁级别：639 漏洞：基于DOM的XSS 描述 CAE Learning Space Enterprise 管理软件容易受到基于DOM的XSS攻击。基于DOM的XSS攻击是指用户向主机发送一个可执行的载荷，从而在受害者的浏览器中从原始客户端脚本修改DOM环境。该攻击是通过手动搜索Burp请求，使用名为Dalfox https://github.com/hahwul/dalfox...
CVE-2020-11023
CVE-2020-11023 POC DOM XSS 此概念验证演示了基于DOM的XSS安全漏洞，通过操纵和使用jQuery DOM方法实现，例如：.append, .text, .html 我使用的Payload： alert"Text: " + $"test".text; 测试该漏洞，请执行以下步骤： 1. 在浏览器中打开目标网站的控制台。 2. 进入控制台窗口并输入以下Payload： 3. Payload: alert"Text: " + $"test".text;...