165 matches found
HTTPLeaks
HTTPLeaks What is this? This project aims to enumerate all possible ways, a website can leak HTTP requests. In one single HTML file. See the file leak.html raw text version in the root of this repository. What is it for? You can use this to test your browser for CSP leaks , your web-mailer for HT...
CVE-2026-88783
The Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit its widening of the allowed HTML elements to the editor context, so the wider set is applied when filtering content submitted by unauthenticated users as well, allowing them to store markup which the Kubio AI Page Builder...
PT-2026-104528
Name of the Vulnerable Software and Affected Versions Kubio AI Page Builder WordPress plugin versions prior to 2.9.3 Description The plugin fails to restrict the expansion of allowed HTML elements to the editor context. Consequently, this expanded set of allowed elements is applied to content...
CVE-2026-59167
SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 2.47.11, the sanitizer in src/lib/core.js does not consistently reject namespaced or custom HTML elements, allowing event-handler attributes to remain on crafted elements. When an applicati...
Duplicate Advisory: Uncontrolled recursion DoS in JustHTML() via deeply nested HTML
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-v7cf-c9rm-wm3j. This link is maintained to preserve external references. Original Description justhtml through 1.9.1 fixed in 1.10.0 is vulnerable to uncontrolled recursion leading to denial of service. During...
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
...
CVE-2025-71249
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
EUVD-2025-38066
A reflected XSS vulnerability exists in CMSimpleXH 1.8's index.php router when attacker-controlled path segments are not sanitized or encoded before being inserted into the generated HTML navigation links, breadcrumbs, search form action, footer links. An attacker-controlled string placed in the...
EUVD-2006-1901
Malware in sbrugna...
EUVD-2012-3511
Malware in sbrugna...
EUVD-2019-3414
Malware in sbrugna...
EUVD-2022-2622
Malicious code in bioql PyPI...
EUVD-2024-53972
Malicious code in bioql PyPI...
CVE-2024-28593
The Chat activity in Moodle 4.3.3 allows students to insert a potentially unwanted HTML A element or IMG element, or HTML content that leads to a performance degradation. NOTE: the vendor's UsingChat page says "If you know some HTML code, you can use it in your text to do things like insert image...
HTML Element / Text not appearing correctly on Auth Window using Citrix Workspace App Native]
When using CWA Native their was HTML Element / Text not appearing correctly on Auth Window. - Text was missing / Custom Banner was missing - Issue is not present when using MS Edge browser...
CVE-2025-30345
OpenSlides CVE-2025-30345 affects OpenSlides versions prior to 4.2.5. The vulnerability arises in the chat_group.create action: while some HTML elements (e.g., SCRIPT) are filtered, others are not, and HTML entities are not consistently encoded when deleting chats or deleting messages, potentiall...
CVE-2025-30342
OpenSlides
CVE-2025-30342
An XSS issue was discovered in OpenSlides before 4.2.5. When submitting descriptions such as Moderator Notes or Agenda Topics, an editor is shown that allows one to format the submitted text. This allows insertion of various HTML elements. When trying to insert a SCRIPT element, it is properly...
PT-2025-10127
Name of the Vulnerable Software and Affected Versions Mail Disguise module for Backdrop CMS versions prior to 1.x-1.0.5 Description The issue concerns the Mail Disguise module, which is designed to obfuscate email addresses to prevent spambots from collecting them. However, the module does not...