Lucene search
+L

5030 matches found

Github Security Blog
Github Security Blog
added 2025/10/23 6:31 p.m.14 views

Piranha CMS vulnerable to stored cross-site scripting (XSS)

A stored cross-site scripting XSS vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTML via creating a page and injecting a crafted payload into the Markdown blocks...

6.1CVSS5.5AI score0.00269EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2025/10/23 6:16 p.m.17 views

CVE-2025-61413

A stored cross-site scripting XSS vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTML via creating a page and injecting a crafted payload into the Markdown blocks...

6.1CVSS0.00269EPSS
SaveExploits1References3
CVE
CVE
added 2025/10/23 12:00 a.m.28 views

CVE-2025-61413

CVE-2025-61413 concerns a stored XSS in Piranha CMS v12.0 within the /manager/pages component. The vulnerability arises when user-supplied input injected into Markdown blocks is not properly sanitized, allowing an attacker to create a page containing a crafted payload that can execute arbitrary w...

6.1CVSS5.2AI score0.00269EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2025/10/23 12:00 a.m.22 views

CVE-2025-61413

A stored cross-site scripting XSS vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTML via creating a page and injecting a crafted payload into the Markdown blocks...

0.00269EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/10/23 12:00 a.m.2 views

CVE-2025-61413

A stored cross-site scripting XSS vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTML via creating a page and injecting a crafted payload into the Markdown blocks...

5.2AI score0.00269EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/10/23 12:00 a.m.16 views

PT-2025-43535

Name of the Vulnerable Software and Affected Versions Piranha CMS versions 12.0 and 12.1 Description A stored cross-site scripting XSS issue exists in the /manager/pages component of Piranha CMS. This allows attackers to execute arbitrary web scripts or HTML by creating a page and injecting a...

6.1CVSS5.5AI score0.00269EPSS
SaveExploits1References16
OSV
OSV
added 2025/10/23 12:00 a.m.8 views

CVE-2025-61413

A stored cross-site scripting XSS vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTML via creating a page and injecting a crafted payload into the Markdown blocks...

6.1CVSS5.6AI score
SaveExploits0References5
Veracode
Veracode
added 2025/10/15 7:17 a.m.10 views

Regular Expression Denial Of Service (ReDoS)

Cattown is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to the use of inefficient regular expressions with potentially exponential backtracking complexity, which allows an attacker to craft malicious markdown inputs that cause excessive CPU usage and lead to...

8.7CVSS6.9AI score0.00334EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/08 12:13 a.m.22 views

CVE-2025-60312

Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting XSS in the "Markdown Input" field, allowing a remote attacker to inject arbitrary HTML/JavaScript code that executes in the victim's browser upon clicking the "Convert to HTML" button...

6.2AI score0.00284EPSS
SaveExploits1References1
NVD
NVD
added 2025/10/07 4:15 p.m.15 views

CVE-2025-60312

Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting XSS in the "Markdown Input" field, allowing a remote attacker to inject arbitrary HTML/JavaScript code that executes in the victim's browser upon clicking the "Convert to HTML" button...

6.1CVSS0.00284EPSS
SaveExploits1References2
OSV
OSV
added 2025/10/07 4:15 p.m.12 views

CVE-2025-60312

Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting XSS in the "Markdown Input" field, allowing a remote attacker to inject arbitrary HTML/JavaScript code that executes in the victim's browser upon clicking the "Convert to HTML" button...

6.1CVSS6AI score0.00284EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-6588

Malware in sbrugna...

7.5CVSS7.5AI score0.01114EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2021-25752

Malware in sbrugna...

6.1CVSS6.3AI score0.0057EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2009-3419

Malware in sbrugna...

4.3CVSS6.4AI score0.00845EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.19 views

EUVD-2020-18956

Malware in sbrugna...

6.5CVSS6.4AI score0.0126EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-1586

Malware in sbrugna...

6.1CVSS6.3AI score0.00836EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2018-0762

Malware in sbrugna...

6.1CVSS6.2AI score0.00977EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2018-21578

Malware in sbrugna...

6.1CVSS6.3AI score0.00829EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2019-19100

Malware in sbrugna...

6.1CVSS6.3AI score0.00826EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-4565

Malware in sbrugna...

5.4CVSS5.6AI score0.00718EPSS
SaveExploits1References4
Rows per page
Query Builder