CVE-2026-105651: Improper Neutralization of Input During Web Page Generation

Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's...

CVE-2026-102426: Improper Neutralization of Input During Web Page Generation

Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dcfilter request parameter, split on the delimiter "l-r", HTML-escaped inside the data-value attribute, and then...

AlmaLinux 9 : osbuild-composer (ALSA-2026:69293)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69293 advisory. golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass CVE-2026-27136 golang.org/x/net/html:...

RHEL 7 : rhc-worker-script (RHSA-2026:75689)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:75689 advisory. Remote Host Configuration rhc worker for executing scripts on hosts managed by Red Hat Lightspeed. Security Fixes: encoding/asn1: golang: G...

CVE-2023-45540

Inyección HTML...

CVE-2025-66849

CVE-2025-66849 PoC de Escalada de Privilegios en Ghost CMS Resumen En Ghost Foundation Ghost CMS hasta la versión 6.4.0, el bloque HTML dentro del editor de borradores de publicaciones no sanitiza ni codifica correctamente el contenido proporcionado por el usuario, lo que resulta en una...

CVE-2020-12625

CVE-2020-12625: Cross-Site Scripting mediante adjunto HTML malicioso en Roundcube Webmail Existe una vulnerabilidad de Cross-Site Scripting XSS en las versiones de Roundcube anteriores a 1.4.4, 1.3.11 y 1.2.10. Al aprovechar el elemento XML "" en un correo con un adjunto "text/html", un atacante...

CVE-2026-95309

An ui misrepresentation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533074595...

Clickjacking-Exploit-Detector

Clickjacking-Exploit-Detector The Clickjacking Exploit Detector uses webpage scanning techniques to identify potential vulnerabilities and provide analysis of those elements. Features HTML Scanning: Checks HTML elements and iframe elements that can be exploited for clickjacking. Warning of...

CVE-2006-3392

CVE-2021-42913 Webmin anterior a 1.290 y Usermin anterior a 1.220 llaman a la función simplifypath antes de decodificar HTML, lo que permite a atacantes remotos leer archivos arbitrarios, como se demuestra usando secuencias "..%01", que omiten la eliminación de secuencias "../" antes de que bytes...

CSRF-via-stored-XSS-for-PrivEsc

Chamilo LMS addLabelgetlang'Thread', $threadEntity-getTitle; 2. /public/main/forum/viewforum.php - Línea 369 .$thread-getTitle.''; 3. ¡Hay más! Causa Raíz: Los títulos de los hilos del foro se almacenan sin la sanitización adecuada Los títulos de los hilos se muestran sin escape HTML en múltiples...

nahsra__antisamy_CVE-2016-10006_1-5-3

antisamy Una biblioteca para realizar una limpieza rápida y configurable de HTML proveniente de fuentes no confiables. Otra forma de decirlo podría ser: es una API que te ayuda a asegurarte de que los clientes no suministren código malicioso en el HTML que envían para su perfil, comentarios, etc....

CVE-2026-105086

WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting doubly-encoded entities in video titles. Because safeString strips tags before decoding entities and runs twice via setTitle and save, attackers ca...

CVE-2026-105224

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL. Attackers can point tools/bazar/actions/valeur.php at a controlled server returning BAZfichetitre markup...

leaflet-cve-2025-69993

CVE-2025-69993 — XSS in Leaflet bindPopup Cross-Site Scripting vulnerability in Leaflet = 1.9.4. The bindPopup method renders user-supplied input as raw HTML without sanitization, allowing arbitrary JavaScript execution. Repository Structure ADVISORY.md — Full security advisory with vulnerability...

CVE-2026-105086 WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title

WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting doubly-encoded entities in video titles. Because safeString strips tags before decoding entities and runs twice via setTitle and save, attackers ca...

CVE-2026-105224 YesWiki before 4.6.7 Stored XSS via Bazar valeur Action

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL. Attackers can point tools/bazar/actions/valeur.php at a controlled server returning BAZfichetitre markup...

CVE-2026-105224

YesWiki versions prior to 4.6.7 are vulnerable to a cross-site scripting (XSS) vulnerability within the Bazar valeur action . The root cause is the rendering of unescaped HTML fetched from a remote URL. Specifically, an attacker can point the tools/bazar/actions/valeur.php endpoint to a controlle...

EUVD-2026-92111

YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a remote URL. Attackers can point tools/bazar/actions/valeur.php at a controlled server returning BAZfichetitre markup...

CVE-2025-30349

Horde IMP vulnerability – obfuscation via HTML encoding – XSS payload Horde 5.2.23; IMP 6.2.27 The details of the vulnerability are explained in Details.md file. The PoC creates and send an email with payload exploiting the vulnerability to the recipient. This kind of email has to be viewed in a...