Glossy WordPress - Reflected XSS

Glossy WordPress plugin v2.3.5 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in high privilege users' browsers, exploit requires victim to click a malicious link. id: CVE-2024-13325 info: name: Glossy WordPress -...

Tube Video Ads Lite - Reflected XSS

Tube Video Ads Lite WordPress plugin = 1.5.7 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craf...

SlideDeck 1 Lite Content Slider - Cross-Site Scripting

SlideDeck 1 Lite Content Slider WordPress plugin = 1.4.8 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL. id: CVE-2024-13224 inf...

ECT Home Page Products - Reflected XSS

ECT Home Page Products WordPress plugin through 1.9 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such as admin, exploit...

Zarinpal Paid Download - Reflected XSS

Zarinpal Paid Download WordPress plugin v2.3 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users such as admin, exploit requires...

Seraphinite Accelerator <= 2.29.18 - Cross-Site Scripting

The Seraphinite Accelerator plugin for WordPress up to and including 2.29.18 was vulnerable to reflected cross-site scripting through the seraphaccelprep parameter. CacheExtractPreparePageParams compared the expected HMAC against the JSON-decoded nonce with PHP's loose != operator, so a JSON...

CVE-2023-41425

CVE-2023-41425 CVE-2023-41425 è una vulnerabilità XSS riflessa in Wonder CMS che consente inoltre di eseguire codice arbitrario tramite uno script dannoso attraverso il componente installModule. Utilizzo Eseguendo l'exploit contro l'loginURL del target, specificando il nostro IP e la porta per il...

CVE-2025-65270

CVE-2025-65270 ⚠️ Disclaimer Questo repository è esclusivamente per scopi educativi e di ricerca sulla sicurezza difensiva 🔥 Panoramica Vulnerabilità di cross-site scripting riflesso XSS in ClinCapture EDC 3.0 e 2.2.3 , che consente a un attaccante remoto non autenticato di eseguire codice...

CVE-2025-52357

CVE-2025-52357 : Sicherheitshinweis: XSS in der Admin-Konsole des FD602GW-DX-R410 Routers Proof of Concept und Sicherheitshinweis für eine Reflected-XSS-Schwachstelle in der Admin-Konsole des FD602GW-DX-R410 Glasfaser-Routers Firmware V2.2.14. Enthält Details, Auswirkungen und Anleitungen zur...

CVE-2021-40513

CVE-2021-40513 OSCAR McMaster 19.401235 Reflektierte Cross-Site-Scripting-Schwachstelle In mehreren Seiten der Version 19.401235 der OSCAR McMaster-Anwendung besteht eine reflektierte Cross-Site-Scripting-Schwachstelle, die die willkürliche Ausführung von JavaScript-Befehlen ermöglicht. Placehold...

CVE-2019-7219

CVE-2019-7219 CVE-2019-7219 Zarafa Webapp Autore: verifysecurity Almeno la versione Webapp 1.6-46049 fino alla 2.0.1.47791 è affetta. hxxps://127.0.0.1/webapp/?fccc0"5f43d=1...

Teldat-Router-CVE-2022-POC

Teldat Router CVE-2022-39996 e CVE-2022-39997 POC Proof of Concept per due vulnerabilità scoperte nei router Teldat RS123 / RS123w. Panoramica CVE ID| Tipo| CWE| CVSS| Gravità ---|---|---|---|--- CVE-2022-39996| XSS Riflesso| CWE-79| 6.1| Media CVE-2022-39997| Password Debole| CWE-521| 9.8| Criti...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to reflected XSS vulnerability in AFT (CVE-2026-0835)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed reflected XSS vulnerability Vulnerability Details CVEID:CVE-2026-0835 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.51, 6.2.1.0 through 6.2.1.1...

CVE-2026-78615

A Reflected Cross-Site Scripting XSS vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in a authenticated user's browser with a specially crafted URL...

CVE-2024-11252-Sassy-Social-Share-XSS

CVE-2023-XXXX: Sassy Social Share Plugin XSS Vulnerability Beschreibung Dieses Projekt zeigt die reflektierte Cross-Site-Scripting XSS-Sicherheitslücke im Sassy Social Share Plugin für WordPress. Diese Schwachstelle kann über den Parameter heateormastodonshare ausgenutzt werden. Verwendung 1...

CVE-2025-51411

🛡️ Divulgazione CVE: CVE-2025-51411 — XSS riflesso in Institute-of-Current-Students Data di divulgazione: 25 luglio 2025 ID CVE: CVE-2025-51411 Gravità: MEDIA CVSS 6.1 🧩 Riepilogo Una vulnerabilità di Cross-Site Scripting XSS riflesso è presente nel progetto Institute-of-Current-Students v1.0, in...

Spring Framework < 5.2.26 / 5.3.x < 5.3.50 / 6.0.x < 6.0.31 / 6.1.x < 6.1.29 / 6.2.x < 6.2.20 / 7.0.x < 7.0.8.1 Multiple Vulnerabilities

The version of Spring Framework installed on the remote host is prior to 5.2.26, 5.3.x prior to 5.3.50, 6.0.x prior to 6.0.31, 6.1.x prior to 6.1.29, 6.2.x prior to 6.2.20, or 7.0.x prior to 7.0.8.1. It is, therefore, affected by multiple vulnerabilities: - Spring MVC and WebFlux applications tha...

-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options

Evolution CMS XSS riflesso v3.2.3 Autore: Sergio Descrizione: Molteplici vulnerabilità di Cross-site scripting XSS riflesso nel processo di installazione di evolution v.3.2.3, nelle opzioni Admin, consentono a un attaccante locale di eseguire script web arbitrari tramite un payload appositamente...

CVE-2026-78615

A Reflected DOM-based XSS vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in an authenticated user's browser via a specially crafted URL. The CVSS 4.0 base score is 4.6 (MEDIUM) , with high privileges and active user interaction requir...

CVE-2026-78615 WatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page

A Reflected Cross-Site Scripting XSS vulnerability in WatchGuard Dimension's report detail page allows an attacker to execute arbitrary JavaScript in a authenticated user's browser with a specially crafted URL...