CVE-2025-71244

SPIP before 4.4.5 and 4.3.9 allows an Open Redirect via the login form when used in AJAX mode. An attacker can craft a malicious URL that, when visited by a victim, redirects them to an arbitrary external site after login. This vulnerability only affects sites where the login page has been...

client.studygood.ru XSS vulnerability

Vulnerable URL: http://client.studygood.ru/login/ajax?jsoncallback=prompt/OPENBUGBOUNTY/...