Lucene search
+L

240 matches found

NVD
NVD
added 2025/11/07 9:15 p.m.26 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

6.1CVSS0.00213EPSS
SaveExploits1References1
CVE
CVE
added 2025/11/07 12:00 a.m.25 views

CVE-2025-63543

CVE-2025-63543 affects TechStore 1.0 with an unvalidated q parameter in the /search_results endpoint, enabling Cross-Site Scripting (XSS). Public sources across Red Hat, NVD, CNNVD, EUVD, CVE/CVEList, and Vuln enrichment consistently describe a reflected/stored-like XSS concern tied to the search...

6.1CVSS5.8AI score0.00213EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2025/11/07 12:00 a.m.19 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

0.00213EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/11/07 12:00 a.m.7 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

5.8AI score0.00213EPSS
SaveExploits1References1
NVD
NVD
added 2025/10/27 11:15 a.m.14 views

CVE-2025-12267

A flaw has been found in abhicodebox ModernShop 20250922. This issue affects some unknown processing of the file /search. Executing manipulation of the argument q can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

5.3CVSS0.00321EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/10/27 12:00 a.m.17 views

PT-2025-43934

Name of the Vulnerable Software and Affected Versions abhicodebox ModernShop version 20250922 Description A flaw exists in the processing of the /search file within abhicodebox ModernShop. Manipulation of the q argument can lead to cross site scripting, potentially allowing for remote attacks. Th...

5.3CVSS5.9AI score0.00321EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-14965

Malware in sbrugna...

5.3CVSS5.5AI score0.01444EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/06 6:31 p.m.5 views

EUVD-2025-32551

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.6AI score0.01357EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/06 4:15 p.m.10 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.2AI score
SaveExploits0References2
OSV
OSV
added 2025/10/06 4:15 p.m.6 views

DEBIAN-CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS5.9AI score0.01357EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/06 4:15 p.m.11 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS0.01357EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/06 4:15 p.m.9 views

UBUNTU-CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.2AI score0.01357EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/06 12:00 a.m.7 views

PT-2025-40904

Name of the Vulnerable Software and Affected Versions DokuWiki version 2025-05-14a Description A Cross Site Scripting issue exists in DokuWiki. A remote attacker may be able to execute arbitrary code through the q parameter. The vulnerable component is 'Librarian' 56.1. Recommendations Update to ...

6.5CVSS5.8AI score0.01357EPSS
SaveExploits0References12
CVE
CVE
added 2025/10/06 12:00 a.m.46 views

CVE-2025-61224

CVE-2025-61224 affects DokuWiki (Librarian component) with a reflected XSS in the q parameter in versions up to 2025-05-14a. The underlying issue is an unvalidated q parameter that allows a remote attacker to induce arbitrary code execution in the context of the victim’s browser or app, as descri...

6.5CVSS6.8AI score0.01357EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/06 12:00 a.m.9 views

DokuWiki 安全漏洞

DokuWiki is an easy-to-use and versatile open source Wiki software from DokuWiki Open Source. A security vulnerability exists in DokuWiki version 2025-05-14a, which stems from an unvalidated q parameter that could lead to a cross-site scripting attack...

6.5CVSS5.8AI score0.01357EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/06 12:00 a.m.17 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS0.01357EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/10/06 12:00 a.m.9 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS5.9AI score0.01357EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/10/06 12:00 a.m.2 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.8AI score0.01357EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2025-28878

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00332EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.16 views

EUVD-2025-22806

Malicious code in bioql PyPI...

7.2CVSS6.5AI score0.00565EPSS
SaveExploits0References2
Rows per page
Query Builder