Lucene search
+L

14 matches found

RedhatCVE
RedhatCVE
•added 2025/12/11 5:03 a.m.•23 views

CVE-2025-65229

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

4.6CVSS5.8AI score0.00168EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/08 9:30 p.m.•10 views

EUVD-2025-201808

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

4.6CVSS5.3AI score0.00168EPSS
SaveExploits0References2
OSV
OSV
•added 2025/12/08 8:15 p.m.•11 views

CVE-2025-65229

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

4.6CVSS5.9AI score0.00168EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/08 8:15 p.m.•17 views

CVE-2025-65229

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

4.6CVSS0.00168EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/08 12:00 a.m.•4 views

CVE-2025-65229

A stored cross-site scripting XSS vulnerability exists in the web interface of Lyrion Music Server = 9.0.3. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. That value is stored by the server and later rendered without proper output...

5.3AI score0.00168EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/08 12:00 a.m.•14 views

PT-2025-49593

Name of the Vulnerable Software and Affected Versions Lyrion Music Server versions prior to 9.0.4 Description A stored cross-site scripting XSS issue exists in the web interface. An authenticated user with access to Settings Player can save arbitrary HTML/JavaScript in the Player name field. This...

4.6CVSS5.6AI score0.00168EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2023-40075

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00384EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/23 12:00 a.m.•14 views

Harbor 跨站脚本漏洞

Harbor is an open source registry from Harbor Open Source. Protects artifacts with policies and role-based access control, ensures images are scanned and free of vulnerabilities, and signs images as trusted. A cross-site scripting vulnerability exists in Harbor versions 2.11.2 and earlier,...

4.1CVSS5.3AI score0.00322EPSS
SaveExploits0References4
CVE
CVE
•added 2025/07/08 2:58 p.m.•33 views

CVE-2025-53480

The Mediawiki - CheckUser extension is vulnerable to reflected Cross-Site Scripting (XSS) in the Account information tab of the Special:Investigate page. The root cause is the improper escaping of specific internationalized messages during rendering. Attackers can trigger this by appending ?usela...

6AI score0.00174EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/07/08 12:00 a.m.•14 views

Wikimedia Mediawiki - CheckUser Extension 安全漏洞

Wikimedia Mediawiki - CheckUser Extension is a Wikimedia Foundation extension for checking IP addresses. A security vulnerability exists in Wikimedia Mediawiki - CheckUser Extension, which stems from a specific internationalization message in the Account information tab that is not properly...

5.4CVSS5.8AI score0.00174EPSS
SaveExploits0References3
OSV
OSV
•added 2023/06/22 3:15 p.m.•15 views

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

5.4CVSS5.6AI score0.00384EPSS
SaveExploits1References1
NVD
NVD
•added 2023/06/22 3:15 p.m.•27 views

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

5.4CVSS5.3AI score0.00384EPSS
SaveExploits1References1
Prion
Prion
•added 2023/06/22 3:15 p.m.•28 views

Cross site scripting

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

4.9CVSS5.3AI score0.00384EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/06/22 12:00 a.m.•46 views

CVE-2023-36093

There is a storage type cross site scripting XSS vulnerability in the filing number of the Basic Information tab on the backend management page of EyouCMS v1.6.3...

5.5AI score0.00384EPSS
SaveExploits1References1
Rows per page
Query Builder