Lucene search
+L

452 matches found

NVD
NVD
•added 2025/11/07 9:15 p.m.•34 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

6.1CVSS0.00228EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/11/07 12:00 a.m.•9 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

5.8AI score0.00228EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/07 12:00 a.m.•32 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross-Site Scripting (XSS) due to an unvalidated q parameter in the /search_results endpoint. An attacker could potentially inject malicious scripts into web pages viewed by other users. Remediation involves applying input validation and output encoding to the q par...

6.1CVSS5.8AI score0.00228EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/11/07 12:00 a.m.•24 views

CVE-2025-63543

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

0.00228EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/07 12:00 a.m.•4 views

CVE-2025-63543: Improper Neutralization of Input During Web Page Generation

TechStore 1.0 is vulnerable to Cross Site Scripting XSS in the /searchresults endpoint via the q parameter...

6.1CVSS5.8AI score0.00228EPSS
SaveExploits1References1
NVD
NVD
•added 2025/10/27 11:15 a.m.•85 views

CVE-2025-12267

A flaw has been found in abhicodebox ModernShop 20250922. This issue affects some unknown processing of the file /search. Executing manipulation of the argument q can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used...

5.3CVSS0.00348EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•25 views

PT-2025-43934

Name of the Vulnerable Software and Affected Versions abhicodebox ModernShop version 20250922 Description A flaw exists in the processing of the /search file within abhicodebox ModernShop. Manipulation of the q argument can lead to cross site scripting, potentially allowing for remote attacks. Th...

5.3CVSS5.9AI score0.00348EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2020-14965

Malware in sbrugna...

5.3CVSS6AI score0.01444EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/06 6:31 p.m.•14 views

EUVD-2025-32551

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1References3
NVD
NVD
•added 2025/10/06 4:15 p.m.•24 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS0.01454EPSS
SaveExploits1References2
OSV
OSV
•added 2025/10/06 4:15 p.m.•18 views

DEBIAN-CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1References1
OSV
OSV
•added 2025/10/06 4:15 p.m.•12 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.2AI score
SaveExploits0References2
OSV
OSV
•added 2025/10/06 4:15 p.m.•16 views

UBUNTU-CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1References4
CVE
CVE
•added 2025/10/06 12:00 a.m.•62 views

CVE-2025-61224

CVE-2025-61224 affects DokuWiki (Librarian component) with a reflected XSS in the q parameter in versions up to 2025-05-14a. The underlying issue is an unvalidated q parameter that allows a remote attacker to induce arbitrary code execution in the context of the victim’s browser or app, as descri...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/10/06 12:00 a.m.•4 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/10/06 12:00 a.m.•29 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS0.01454EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/10/06 12:00 a.m.•10 views

PT-2025-40904

Name of the Vulnerable Software and Affected Versions DokuWiki version 2025-05-14a Description A Cross Site Scripting issue exists in DokuWiki. A remote attacker may be able to execute arbitrary code through the q parameter. The vulnerable component is 'Librarian' 56.1. Recommendations Update to ...

6.5CVSS6.7AI score0.01454EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•5 views

CVE-2025-61224: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/10/06 12:00 a.m.•20 views

DokuWiki 安全漏洞

DokuWiki is an easy-to-use and versatile open source Wiki software from DokuWiki Open Source. A security vulnerability exists in DokuWiki version 2025-05-14a, which stems from an unvalidated q parameter that could lead to a cross-site scripting attack...

6.5CVSS5.7AI score0.01454EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2025/10/06 12:00 a.m.•20 views

CVE-2025-61224

Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter...

6.5CVSS6.8AI score0.01454EPSS
SaveExploits1
Rows per page
Query Builder