CVE-2024-43005

The ZZCMS v2023 content management system contains a reflected cross-site scripting (XSS) vulnerability within the dl_liuyan_save.php component. This flaw allows an attacker to execute arbitrary code in the context of a user's browser by injecting a crafted payload, which can lead to malicious sc...

CVE-2023-40984

A reflected cross-site scripting XSS vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scripts via injecting a crafted payload into the Replace in Results file...

CVE-2023-34637

A stored cross-site scripting XSS vulnerability in IsarNet AG IsarFlow v5.23 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the dashboard title parameter in the IsarFlow Portal...