Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/12/11 5:3 a.m.2 views

CVE-2025-65229

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

4.6CVSS5.8AI score0.00024EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/08 9:30 p.m.2 views

EUVD-2025-201808

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

4.6CVSS5.3AI score0.00024EPSS
Exploits0References2
OSV
OSV
added 2025/12/08 8:15 p.m.2 views

CVE-2025-65229

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

4.6CVSS5.9AI score0.00024EPSS
Exploits0References2
NVD
NVD
added 2025/12/08 8:15 p.m.2 views

CVE-2025-65229

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

4.6CVSS0.00024EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.2 views

PT-2025-49593

Name of the Vulnerable Software and Affected Versions Lyrion Music Server versions prior to 9.0.4 Description A stored cross-site scripting XSS issue exists in the web interface. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. This...

4.6CVSS5.6AI score0.00024EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/12/08 12:0 a.m.2 views

CVE-2025-65229

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

5.3AI score0.00024EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-40075

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00108EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/07/23 12:0 a.m.3 views

Harbor 跨站脚本漏洞

Harbor is an open source registry from Harbor Open Source. Protects artifacts with policies and role-based access control, ensures images are scanned and free of vulnerabilities, and signs images as trusted. A cross-site scripting vulnerability exists in Harbor versions 2.11.2 and earlier,...

4.1CVSS5.3AI score0.0016EPSS
Exploits0References4
CVE
CVE
added 2025/07/08 2:58 p.m.15 views

CVE-2025-53480

The CVE-2025-53480 issue affects the MediaWiki CheckUser extension on the Special:Investigate page, Account information tab. Root cause: specific internationalized messages are rendered without proper escaping, enabling reflected XSS when an attacker appends ?uselang=x-xss to the URL. Affected ve...

5.4CVSS6AI score0.00129EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/08 12:0 a.m.1 views

Wikimedia Mediawiki - CheckUser Extension 安全漏洞

Wikimedia Mediawiki - CheckUser Extension is a Wikimedia Foundation extension for checking IP addresses. A security vulnerability exists in Wikimedia Mediawiki - CheckUser Extension, which stems from a specific internationalization message in the Account information tab that is not properly...

5.4CVSS5.8AI score0.00129EPSS
Exploits0References3
OSV
OSV
added 2023/06/22 3:15 p.m.3 views

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

5.4CVSS5.6AI score0.00108EPSS
Exploits1References1
NVD
NVD
added 2023/06/22 3:15 p.m.7 views

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

5.4CVSS5.3AI score0.00108EPSS
Exploits1References1
Prion
Prion
added 2023/06/22 3:15 p.m.18 views

Cross site scripting

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

4.9CVSS5.3AI score0.00108EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/06/22 12:0 a.m.16 views

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

5.5AI score0.00108EPSS
Exploits1References1
Rows per page
Query Builder