Lucene search
+L

454 matches found

RedhatCVE
RedhatCVE
•added 2025/11/10 5:11 p.m.•20 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

6.1CVSS5.8AI score0.00228EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/11/07 9:15 p.m.•19 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

6.1CVSS5.8AI score0.00228EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/07 9:15 p.m.•38 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

6.1CVSS0.00228EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/11/07 12:00 a.m.•27 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

0.00228EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/11/07 12:00 a.m.•9 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

5.8AI score0.00228EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/07 12:00 a.m.•5 views

CVE-2025-63543: Improper Neutralization of Input During Web Page Generation

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

6.1CVSS5.8AI score0.00228EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/07 12:00 a.m.•33 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross-Site Scripting (XSS) due to an unvalidated q parameter in the /search_results endpoint. An attacker could potentially inject malicious scripts into web pages viewed by other users. Remediation involves applying input validation and output encoding to the q par...

6.1CVSS5.8AI score0.00228EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2025/10/27 11:15 a.m.•86 views

CVE-2025-12267

A flaw has been found in abhicodebox ModernShop 20250922. This issue affects some unknown processing of the file /search. Executing manipulation of the argument q can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

5.3CVSS0.00348EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•26 views

PT-2025-43934

Name of the Vulnerable Software and Affected Versions abhicodebox ModernShop version 20250922 Description A flaw exists in the processing of the /search file within abhicodebox ModernShop. Manipulation of the q argument can lead to cross site scripting, potentially allowing for remote attacks. Th...

5.3CVSS5.9AI score0.00348EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2020-14965

Malware in sbrugna...

5.3CVSS6AI score0.01444EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/06 6:31 p.m.•16 views

EUVD-2025-32551

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2025/10/06 4:15 p.m.•20 views

DEBIAN-CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/10/06 4:15 p.m.•12 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.2AI score
SaveExploits0References2
NVD
NVD
•added 2025/10/06 4:15 p.m.•26 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS0.01454EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2025/10/06 4:15 p.m.•16 views

UBUNTU-CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1References4
CVE
CVE
•added 2025/10/06 12:00 a.m.•66 views

CVE-2025-61224

CVE-2025-61224 affects DokuWiki (Librarian component) with a reflected XSS in the q parameter in versions up to 2025-05-14a. The underlying issue is an unvalidated q parameter that allows a remote attacker to induce arbitrary code execution in the context of the victim’s browser or app, as descri...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/10/06 12:00 a.m.•4 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•5 views

CVE-2025-61224: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2025/10/06 12:00 a.m.•23 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2025/10/06 12:00 a.m.•11 views

PT-2025-40904

Name of the Vulnerable Software and Affected Versions DokuWiki version 2025-05-14a Description A Cross Site Scripting issue exists in DokuWiki. A remote attacker may be able to execute arbitrary code through the q parameter. The vulnerable component is 'Librarian' 56.1. Recommendations Update to ...

6.5CVSS6.7AI score0.01454EPSS
SaveExploits1References12
Rows per page
Query Builder