PT-2026-46894

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 Description An unauthenticated Reflected Cross-Site Scripting XSS issue exists in the AVideo YouTubeAPI plugin. The problem occurs because the search query parameter is concatenated directly into the href attribut...

CVE-2024-51226

Phpgurukul Vehicle Record Management System v1.0 contains a stored XSS in /admin/search-vehicle.php where an attacker can inject a crafted payload via the Search parameter to execute arbitrary web scripts/HTML. The issue is triggered by unsafely handling input in that parameter, leading to script...

Art Gallery Management System 安全漏洞

Art Gallery Management System is an art gallery management system. Art Gallery Management System version 1.0 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by parameter search, which can be exploited by an...

Simple Image Stack Website Cross-Site Scripting Vulnerability

Simple Image Stack Website is a simple image display website. A cross-site scripting vulnerability exists in SourceCodester Simple Image Stack Website version 1.0, which stems from the parameter search that causes cross-site scripting...

Young Entrepreneur E-Negosyo System SQL注入漏洞

Young Entrepreneur E-Negosyo System is a Young Entrepreneur E-Negosyo System for janobe individual developers. A security vulnerability exists in SourceCodester Young Entrepreneur E-Negosyo System version 1.0, which stems from an incorrect manipulation of the parameter search resulting in sql...