leaflet-cve-2025-69993

CVE-2025-69993 — Leaflet bindPopup의 XSS Leaflet = 1.9.4의 교차 사이트 스크립팅XSS 취약점입니다. bindPopup 메서드는 사용자가 제공한 입력을 삭제sanitization 과정 없이 원시 HTML로 렌더링하여 임의의 JavaScript 실행을 허용합니다. 저장소 구조 ADVISORY.md — 취약점 세부 정보, 영향 분석 및 권장 완화 조치를 담은 전체 보안 권고문 leaflet-xss-poc/ — 실제 시나리오사용자 양식 입력이 bindPopup에 직접 전달됨에서 취약점을 시연...

CVE-2021-24884

CVE-2021-24884 Formidable 4.09.04의 XSS2RCE Formidable 4.09.04는 ,,, 및 과 같은 특정 HTML 태그를 주입할 수 있도록 허용했습니다. 이로 인해 인증되지 않은 원격 공격자가 악성 링크를 주입하여 HTML 인젝션을 악용할 수 있습니다. HTML 인젝션은 인증된 사용자가 해당 링크를 따르도록 속일 수 있습니다. 링크가 클릭되면 JavaScript 코드가 실행되어 저장형 XSS로 이어질 수 있습니다. 이 취약점은 영향을 받는 시스템의 웹 기반 항목 검사 페이지에서 링크의...

CVE-2021-42663

CVE-2021-42663 CVE-2021-42662 — уязвимость HTML-инъекции в системе онлайн-бронирования и резервирования мероприятий версии 2.3.0. Техническое описание: В системе онлайн-бронирования и резервирования мероприятий версии 2.3.0 существует уязвимость HTML-инъекции. Злоумышленник может использовать эту...

CVE-2023-47119

목차 CVE-2023-47119 상세 분석 POC 권한 상승 ? LAB 설정 CVE-2023-47119 POC는 CVE-2023-47119의 취약점으로, Discourse의 stable 브랜치 버전 3.1.3 이전 및 beta와 tests-passed 브랜치 버전 3.2.0.beta3 이전 버전에 영향을 미칩니다. 일부 링크는 Onebox 엔진을 통해 렌더링될 때 임의의 HTML 태그를 주입할 수 있습니다. 상세 분석 글 :...

LetterPress-1.2.1-Open-Redirection-Via-Html-Injection-Vulnerability

익스플로잇 제목: LetterPress CLICK THIS" 코드를 삽입하고 Save Campaign을 클릭합니다. 2. 캠페인을 확인한 후 "CLICK THIS" 하이퍼링크를 클릭하면 제3자 사이트로 리디렉션됩니다. 예: evil.com...

CVE-2024-5737

CVE-2024-5737 AdmirorFrames Joomla! 확장 프로그램 HTML 태그로 설정된 너비 및 높이 필드를 가진 PNG를 생성하는 PHP 스크립트 예제입니다: $height=0x3c; $im = imagecreate$width, $height; $hex=unpack'H',$payload; $chunks=strsplit$hex1, 6; for$i=0; $i count$chunks; $i++ $colorchunks=strsplit$chunks$i, 2;...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection

CVE-2021-46079 익스플로잇 제목: Vehicle Service Management System - '다중' 파일 업로드로 인한 HTML 인젝션 익스플로잇 작성자: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 HIGH 참고 자료: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection https://nvd.nist.gov/vuln/detail/CVE-2021-46079...

viber-desktop-html-injection

Viber Desktop — HTML インジェクション CVE-2025-55996 CVE: CVE-2025-55996 発見者: Thaw Khant Cycbake 製品: Viber Desktop 影響を受けるバージョン: Viber Desktop 25.6.0 およびそれ以前の可能性あり 概要 Viber Desktop のディープリンクハンドラー viber://forward?text= は、メッセージ作成/転送インターフェース内で text パラメーターに指定された未サニタイズの HTML...

CVE-2024-30956

CVE-2024-30956 참조 https://www.lauyan.com/en/toweb-updates.htmliyFEw37D DOM 기반 XSS TOWeb 버전 5 예: http://127.0.0.1:8000/message.html?==gC+QHcpJ3Yz9CPpcyUThFIkV2chJWLN9ERngCdyVGbh5DdwlmcjNHP URL로 이동하면 JS 코드가 실행됩니다. 참고: src에는 관련 HTML/JS 코드의 복사본이 포함되어 있습니다. TOWeb는 폐쇄 소스이며 비용을 지불하지 않고 이전 버전을 다운로드할 수 없기...

CVE-2026-100641

SiYuan versions before v3.8.4 are vulnerable to a Stored XSS flaw because they fail to HTML-escape stored flashcard block content. Specifically, content retrieved from the /api/riff/getRiffCards endpoint is inserted into app/src/card/viewCards.ts and assigned to listElement.innerHTML without prop...

EUVD-2026-87735

SiYuan before v3.8.4 does not HTML-escape stored flashcard block content before interpolating it into the card-manager list markup. Block content returned by /api/riff/getRiffCards is inserted into a card item template in app/src/card/viewCards.ts and assigned to listElement.innerHTML, so content...

CVE-2026-100639

SiYuan v3.8.3 is vulnerable to a Cross-Site Scripting (XSS) flaw due to a failure to HTML-escape the data-subtype attribute during gutter-button markup generation. This occurs when content containing a Kramdown inline attribute list (IAL) is pasted as plain-text Markdown. The shared Lute renderer...

CVE-2026-92411

The WP Delicious WordPress plugin before 1.10.8 does not validate or escape the HTML tag name taken from user-supplied recipe block data before rendering it on the front end, allowing users with the Contributor role and above to inject arbitrary HTML tags, including script tags, which execute whe...

CVE-2026-92411

The WP Delicious WordPress plugin (versions prior to 1.10.8 ) is vulnerable to Stored XSS . The root cause is a failure to validate or escape the HTML tag name extracted from user-supplied recipe block data before it is rendered on the front end. This allows authenticated users with the Contribut...

EUVD-2026-87535

The WP Delicious WordPress plugin before 1.10.8 does not validate or escape the HTML tag name taken from user-supplied recipe block data before rendering it on the front end, allowing users with the Contributor role and above to inject arbitrary HTML tags, including script tags, which execute whe...

CVE-2026-84463

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a user with Knowledge Base editing rights for a category can embed a video widget in a published answer with a specially crafted value. When the answer is rendered, that value is inserted into the page's HTML...

CVE-2026-63216

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, unsanitized option labels are rendered in the configuration dialogs of AI Agents within Zammad's admin UI. When rendering the list of selected options, the option label is output as raw HTML without escaping. An...

CVE-2026-84463

The Zammad helpdesk system is vulnerable to stored HTML injection in the Knowledge Base video widget prior to version 7.1.2 . An attacker with Knowledge Base editing rights can embed a specially crafted value in a published answer. Because the system fails to escape this value for its attribute c...

CVE-2026-84463 Zammad: Stored HTML injection in Knowledge Base video widget enables forced session switching via unescaped iframe attribute

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a user with Knowledge Base editing rights for a category can embed a video widget in a published answer with a specially crafted value. When the answer is rendered, that value is inserted into the page's HTML...

CVE-2026-84463 Zammad: Stored HTML injection in Knowledge Base video widget enables forced session switching via unescaped iframe attribute

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a user with Knowledge Base editing rights for a category can embed a video widget in a published answer with a specially crafted value. When the answer is rendered, that value is inserted into the page's HTML...