CVE-2026-1960

Stored Cross-Site Scripting XSS vulnerability in Loggro Pymes, via the 'Facebook' parameter in '/loggrodemo/jbrain/ConsultaTerceros' endpoint...

CVE-2026-1960

A Stored Cross-Site Scripting (XSS) vulnerability affects Loggro Pymes, exploitable via the Facebook parameter in the /loggrodemo/jbrain/ConsultaTerceros endpoint. The CVE-2026-1960 description (Loggro Pymes) confirms the issue and shows a CVSS v4.0 base score of 5.1 (MEDIUM) with Network attack ...

CVE-2026-1960 Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes

Stored Cross-Site Scripting XSS vulnerability in Loggro Pymes, via the 'Facebook' parameter in '/loggrodemo/jbrain/ConsultaTerceros' endpoint...

CVE-2026-1960

Stored Cross-Site Scripting XSS vulnerability in Loggro Pymes, via the 'Facebook' parameter in '/loggrodemo/jbrain/ConsultaTerceros' endpoint...

CVE-2026-1960 Stored Cross-Site Scripting (XSS) vulnerability in Loggro Pymes

Stored Cross-Site Scripting XSS vulnerability in Loggro Pymes, via the 'Facebook' parameter in '/loggrodemo/jbrain/ConsultaTerceros' endpoint...

Loggro Pymes 跨站脚本漏洞

Loggro Pymes is a cloud-based business management software developed by the Spanish company Loggro. Loggro Pymes has a cross-site scripting vulnerability, which stems from incorrect handling of parameters in the file /loggrodemo/jbrain/ConsultaTerceros, specifically the parameter Facebook. This...

Simple Art Gallery SQL注入漏洞

Simple Art Gallery is an art gallery application from Simple Art Gallery, Inc. A SQL injection vulnerability exists in Simple Art Gallery version 1.0, which stems from a problem in the file adminHome.php, where manipulation of the parameter socialfacebook can lead to sql injection...

Rencontre < 3.2.2 - Authenticated Stored XSS via facebook parameter & SQL Injection

An authenticated persistent cross-site scripting vulnerability has been found in the web interface of the plugin that allows the execution of arbitrary HTML/script code to be executed in the victim's browser when they visit the web site. Affected Version Version: alert'XSS'// Encoded-Payload:...