CVE-2026-19230

A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=saveupload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. T...

CVE-2026-19230

CVE-2026-19230 affects SourceCodester Photo Share Website 1.0, specifically the file /social/ajax.php?action=save_upload in the Comment Input Box component. The vulnerability is Cross-Site Scripting (XSS) caused by manipulation of the input argument content. Attackers may exploit this remotely, a...

CVE-2026-19230 SourceCodester Photo Share Website Comment Input Box ajax.php save_upload cross site scripting

A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=saveupload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. T...

EUVD-2026-54572

A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=saveupload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. T...

CVE-2018-19193

An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen...

PT-2025-53440

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.22.2 Description Gitea versions before 1.22.2 contain a cross-site scripting XSS issue. The search input box, used when creating tags and branches, utilizes v-html instead of v-text, which allows for the execution of...

EUVD-2006-2966

Malware in sbrugna...

EUVD-2006-2965

Malware in sbrugna...

EUVD-2018-20564

Malware in sbrugna...

EUVD-2021-32785

Malicious code in bioql PyPI...

EUVD-2021-29613

Malicious code in bioql PyPI...

Kwayy HTML Sitemap < 4.0 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. 1. Click the 'Settings' button of this plugin. 2...

Sliderby10Web < 1.2.53 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. PoC 1. Go to "Slider » Sliders" and edit one of...

Google TensorFlow DrawBoundingBoxes Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial-of-service vulnerability exists in Google TensorFlow, which stems from the fact that when DrawBoundingBoxes receives input boxes that do not belong to the float dtype, it gives the assertion...

Product Show Room Site 安全漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to cross-site scripting, which stems from using a special string input text box that leads to cross-site scripting. No details of the vulnerability are...

CVE-2021-46083

uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting XSS via the input box of the statistical code...

Cross site scripting

uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting XSS via the input box of the statistical code...

Cross site scripting

A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box...

CVE-2021-46083

uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting XSS via the input box of the statistical code...

CVE-2021-46084

CVE-2021-46084 affects uscat, a forum system based on Javaex + Ssm. The vulnerability is a Cross Site Scripting (XSS) issue via the "close registration information" input box. The connected documents confirm the vulnerability exists but do not provide exploitation details, affected versions, or r...