PT-2026-46894

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 Description An unauthenticated Reflected Cross-Site Scripting XSS issue exists in the AVideo YouTubeAPI plugin. The problem occurs because the search query parameter is concatenated directly into the href attribut...

CVE-2024-51226

The Phpgurukul Vehicle Record Management System v1.0 is susceptible to a stored cross-site scripting (XSS) vulnerability in the /admin/search-vehicle.php component. The root cause is the improper filtering and escaping of user-provided data within the Search parameter . An attacker can exploit th...

Art Gallery Management System 安全漏洞

Art Gallery Management System is an art gallery management system. Art Gallery Management System version 1.0 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by parameter search, which can be exploited by an...

Simple Image Stack Website Cross-Site Scripting Vulnerability

Simple Image Stack Website is a simple image display website. A cross-site scripting vulnerability exists in SourceCodester Simple Image Stack Website version 1.0, which stems from the parameter search that causes cross-site scripting...

Young Entrepreneur E-Negosyo System SQL注入漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in SourceCodester Young Entrepreneur E-Negosyo System version 1.0, which stems from an incorrect manipulation of the parameter search resulting in sql...