CVE-2025-63533

A cross-site scripting XSS vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and rprofile.php components. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript...

CVE-2025-45754

A stored cross-site scripting XSS vulnerability exists in SeedDMS 6.0.32. This vulnerability allows an attacker to inject malicious JavaScript payloads by creating a document with an XSS payload as the document name...

CVE-2020-25761

Projectworlds Visitor Management System in PHP 1.0 allows XSS. The file myform.php does not perform input validation on the request parameters. An attacker can inject javascript payloads in the parameters to perform various attacks such as stealing of cookies,sensitive information etc...

CVE-2025-45754

A stored cross-site scripting (XSS) vulnerability exists in SeedDMS version 6.0.32 , a PHP and MySQL-based document management system. An attacker can inject malicious JavaScript payloads by creating a document that includes an XSS payload within the document name . This vulnerability allows for ...

PT-2021-18390

Name of the Vulnerable Software and Affected Versions Softing AG OPC Toolbox versions prior to 4.10.1.13036 Description The issue allows for Stored XSS via the ITEMLISTVALUESITEMID parameter in the "/en/diag values.html" API endpoint, resulting in JavaScript payload injection into the trace file...