6 matches found
CVE-2026-89191 Stored Cross-Site Scripting in SQLView KRIS
Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...
Cross-site Scripting (XSS)
FacturaScripts is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper encoding of user-controlled referencia and codsubcuenta values in JavaScript within HTML onclick attributes, which allows an attacker to inject and execute arbitrary JavaScript when a user opens the...
EUVD-2026-11125
The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.0.1 via form field submissions. This is due to insufficient input sanitization in the lfbleadsanitize function which omits certain...
WordPress plugin Thanh Toán Quét Mã QR Code T? Ð?ng – MoMo, ViettelPay, VNPay và 40 ngân hàng Vi?t Nam 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...
PT-2022-9456
Name of the Vulnerable Software and Affected Versions Social Sharing Plugin WordPress plugin versions prior to 3.3.40 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs when the "Enable 'More' icon" option is enabled, which is the default setting. The problem...
CVE-2021-24746: Improper Neutralization of Input During Web Page Generation
The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back in onclick attributes when the "Enable 'More' icon" option is enabled which is the default setting, leading to a Reflected Cross-Site Scripting issue...