Lucene search
+L

16297 matches found

Kitploit
Kitploit
added 2026/09/12 2:58 p.m.4 views

CVE-2025-46178

CVE-2025-46178 Cross-Site Scripting XSS vulnerability exists in askquery.php via the eid parameter in the CloudClassroom PHP Project. This allows remote attackers to inject arbitrary JavaScript in the context of a victim s browser session by sending a crafted URL, leading to session hijacking or...

6.1CVSS5.7AI score0.00392EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 2:58 p.m.11 views

WebGoat.NET

Webgoat.NET Source Code: https://github.com/jerryhoff/WebGoat.NET Download zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master This web application is a learning platform that attempts to teach about common web security flaws. It contains generic security flaws that apply to most web...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 2:56 p.m.7 views

CVE-2023-46948

CVE-2023-46948 - Reflected XSS in Temenos T24 R19.40 A reflected Cross-Site Scripting XSS vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attacker to execute arbitrary JavaScript code in an authenticated victim browser-based web console. Affected Product: Temenos T24 -...

5.4CVSS5.9AI score0.00391EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 2:48 p.m.50 views

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 2:32 p.m.6 views

CVE-2022-30514

CVE-2022-30514 School Dormitory Management System 1.0 - Reflected XSS Exploit Title: School Dormitory Management System 1.0 - Reflected XSS Date: 2022-05-25 CVE: CVE-2022-30514 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

6.1CVSS6.4AI score0.03635EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 2:30 p.m.10 views

CVE-2022-1597

CVE-2022-1597 The plugin, used as a companion for the Discy and Himer themes, does not sanitise and escape a parameter on its reset password form which makes it possible to perform Reflected Cross-Site Scripting attacks Affected Plugins: WPQA history.pushState'', '', '/' Nuclei Template:...

6.1CVSS6.5AI score0.03017EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/12 2:14 p.m.7 views

CVE-2021-37833

CVE 2021-37833 Hotel Druid 3.0.2 Reflected Cross Site Scripting Vulnerability A reflected Cross Site Scripting vulnerability exists in multiple pages in version 3.0.2 of the Hotel Druid application that allows for arbitrary execution of JavaScript commands. https://vulners.com/cve/CVE-2021-37833...

6.1CVSS6.4AI score0.04878EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 2:10 p.m.11 views

CVE-2023-44813

CVE-2023-44813 A reflected cross-site scripting XSS vulnerability in the mode parameter on Invite Friend function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter: mode Exploit - Proof of Concept POC...

6.1CVSS6.4AI score0.01754EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 2:00 p.m.7 views

poc-cve-xss-inventory-press-plugin

Update - 6-23-2023 The CVE-2023-2579 ID was reserved and the PoC was published in the WPScan website: https://wpscan.com/vulnerability/3cfcb8cc-9c4f-409c-934f-9f3f043de6fe Details Title: Authenticated Reflected Cross-Site Scripting in InventoryPress Plugin for WordPress CMS Date: 2023-04-21 Autho...

5.4CVSS6.8AI score0.01129EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 1:59 p.m.7 views

CVE-2016-3113

CVE-2016-3113 PoC A proof of concept to exploit the reflected XSS vulnerability in the oVirt web interface RedHat. In this PoC a VM in the oVirt IaaS environment is to be started via the victim's browser session. JS code has been kept simple due to the rush. More Info here:...

6.1CVSS6.4AI score0.0274EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 1:49 p.m.5 views

CVE-2023-31705

CVE-2023-31705 description A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter. Vulnerability Type Cross Site Scripting XSS Vendor of Product Sourcecodster Affected Produc...

5.4CVSS6AI score0.00516EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 1:35 p.m.9 views

CVE-2022-24181

CVE-2022-24181 and CVE-2022-26616. both are probably same Open-journal-system-Vulnerability XSS via Host Header injection and Steal Password Reset Token of another user Step to reproduce: 1. Go to this site: https://who's-using-ojs-software.com 2. And capture this request in burp , and send to...

6.1CVSS6.3AI score0.0608EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 1:18 p.m.10 views

CVE-2023-30212

CVE-2023-30212 LAB SETUP Prerequisite Download docker.io sudo apt install -y docker.io STEPS 1. Download all files from my repository using the below command. git clone https://github.com/AAsh035/CVE-2023-30212.git 2. Now to make a docker image run the following command: sudo docker build -t vuln...

6.1CVSS6.4AI score0.08115EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/12 1:16 p.m.5 views

Tiny-XSS-Payloads

Tiny-XSS-Payloads A collection of short XSS payloads that can be used in different contexts. The DEMO available here: https://tinyxss.terjanq.me Current Payloads root@kitploit: ... -- root@kitploit: root@kitploit: root@kitploit: root@kitploit: root@kitploit: root@kitploit: root@kitploit:...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 12:58 p.m.7 views

CVE-2023-43325

mooSocial: XSS CVE-2023-43325 A reflected cross-site scripting XSS vulnerability exisits in the dataredirecturl parameter on user login function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter:...

6.1CVSS6.4AI score0.01857EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/12 10:17 a.m.10 views

CVE-2024-7313

Shield Security Plugin Vulnerability Exploit CVE-2024-7313 Overview This repository contains a Python PoC script designed to exploit a reflected XSS vulnerability in the Shield Security Plugin for WordPress, affecting versions below 20.0.6. The vulnerability CVE-2024-7313 allows an attacker to...

6.1CVSS5.9AI score0.01551EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/12 10:15 a.m.6 views

CVE-2025-50866

CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting XSS vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading t...

6.1CVSS5.8AI score0.00273EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/12 7:45 a.m.6 views

CVE-2022-30513

CVE-2022-30513 School Dormitory Management System 1.0 - Reflected XSS Exploit Title: School Dormitory Management System 1.0 - Reflected XSS Date: 2022-05-25 CVE: CVE-2022-30513 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

6.1CVSS6.4AI score0.03635EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 6:49 a.m.4 views

CVE-2025-56605

CVE-2025-56605 XSS Cross-Site Scripting Vulnerability CVE-2025-56605 — Reflected XSS in Event Management System 1.0 Description: A reflected Cross-Site Scripting XSS vulnerability exists in register.php of PuneethReddyHC/event-management 1.0. The mobile POST parameter is improperly validated and...

5.4CVSS5.9AI score0.00189EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 6:46 a.m.7 views

poc-cve-xss-uploading-svg

Details Title: Authenticated Reflected Cross-Site Scripting in "Uploading SVG, WEBP and ICO files" Plugin for WordPress CMS Date: 2023-08-10 Author: Danilo Albuquerque Vendor Homepage: https://wordpress.org Software Link: https://wordpress.org/download Version: WordPress 6.3 Plugin's Name and...

5.9AI score
SaveExploits0
Rows per page
Query Builder