CVE-2019-20212

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat widget/page message form...

CVE-2019-20211

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longitude, Email Address, Description, Name, Job or Position, Description, Service Name, Address, Latitude, Longitude, Phon...

CVE-2019-20211

The CVE-2019-20211 entry affects WordPress themes CTHthemes CityBook (<2.3.4), TownHub (<1.0.6), and EasyBook (

Travel Booking < 2.7.8.6 - Reflected & Persistent XSS Issues

Reflected & Persistent XSS vulnerability was discovered in the 'Travel Booking WordPress Theme', tested version — v2.7.8.5 Edit WPScanTeam: January 11th, 2020 - Report received & Envato contacted January 12th, 2020 - Report updated with Reflected XSS, Envato notified again. January 12th, 2020 -...

EasyBook < 1.2.2 - Multiple Vulnerabilities

Multiple vulnerabilities was discovered in the 'EasyBook – Directory & Listing WordPress Theme', tested version — v1.2.1: - Unauthenticated Reflected XSS - Authenticated Persistent XSS - IDOR December 27th, 2019 - Envato Contacted January 6th, 2020 - Envato Investigating January ??th, 2020 -...

EasyBook < 1.2.2 - Multiple Vulnerabilities

Multiple vulnerabilities was discovered in the 'EasyBook – Directory & Listing WordPress Theme', tested version — v1.2.1: - Unauthenticated Reflected XSS - Authenticated Persistent XSS - IDOR December 27th, 2019 - Envato Contacted January 6th, 2020 - Envato Investigating January ??th, 2020 -...

CityBook < 2.3.4 - Multiple Vulnerabilities

Multiple vulnerabilities was discovered in the 'CityBook - Directory & Listing WordPress Theme', tested version — v2.3.3: - Unauthenticated Reflected XSS - Authenticated Persistent XSS - IDOR Edit WPScanTeam: December 27h, 2019 - Envato Contacted January 6th, 2020 - Envato Investigating January...

Codoforum 4.8.3 - input_txt Persistent Cross-Site Scripting

Codoforum 4.8.3 - inputtxt Persistent Cross-Site Scripting Exploit Title: Codoforum 4.8.3 - Persistent Cross-Site Scripting Google Dork: intext:"Powered by Codoforum" Date: 2020-01-07 Exploit Author: Vyshnav Vizz Vendor Homepage: https://codoforum.com/index.php Software Link:...

CVE-2013-5638

Transcend WiFiSD 1.8 has persistent XSS...

CVE-2013-5637

PQI AirCard has persistent XSS...

Cross site scripting

PQI AirCard has persistent XSS...

CVE-2013-5638

Transcend WiFiSD 1.8 has persistent XSS...

CVE-2013-5638

The CVE-2013-5638 entry concerns Transcend WiFiSD 1.8, where a persistent cross-site scripting (XSS) vulnerability exists in the web application. The root cause is described as lack of proper validation of client-side data by the WEB application, enabling an attacker to execute client-side code. ...

CVE-2013-5637

CVE-2013-5637 affects PQI AirCard with a persistent cross-site scripting (XSS) vulnerability. Multiple connected sources describe an XSS flaw arising from insufficient validation of client-side data, enabling attacker-controlled input to be reflected or stored in a web context. CVSS data indicate...

CVE-2013-5637

PQI AirCard has persistent XSS...

CVE-2020-5191

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities...

Cross site scripting

PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persistent XSS vulnerabilities...

CVE-2020-5191

PHPGurukul Hospital Management System in PHP v4.0 is affected by multiple Persistent XSS (Cross‑Site Scripting) vulnerabilities, as documented by CVE-2020-5191. The cited sources consistently describe the issue as client-side script injections that could be executed in the context of the affected...

Exploit for Cross-site Scripting in Redmine

CVE-2019-17427 CVE-2019-17427 Persistent XSS POC In Redmine...

HomeAutomation 3.3.2 - Persistent Cross-Site Scripting

Exploit: HomeAutomation 3.3.2 - Persistent Cross-Site Scripting Date: 2019-12-30 Author: LiquidWorm Vendor: Tom Rosenback and Daniel Malmgren Product web page: http://karpero.mine.nu/ha/ Affected version: 3.3.2 Tested on: Apache/2.4.41 centos OpenSSL/1.0.2k-fips Advisory ID: ZSL-2019-5556 Advisor...