CVE-2026-95661

MISP is affected by a reflected XSS vulnerability in the attribute histogram view . The root cause is the $selectedTypes variable, derived from the URL path segment, being interpolated directly into a JavaScript array literal inside an onClick HTML attribute without any encoding or escaping. An a...

CVE-2025-12101-checker

CVE-2025-12101-checker PoC simple en Python para verificar instancias de Citrix NetScaler ADC / Gateway por CVE-2025-12101 XSS reflejado en /cgi/logout usando un payload manipulado SAMLResponse + RelayState. ⚠️ Usa esta herramienta solo en sistemas de tu propiedad o para los que tengas...

CVE-2026-95659

MISP versions prior to 2.5.47 are affected by a reflected cross-site scripting (XSS) vulnerability in the AnalystDataController::viewForObject action. The method accepts a parent object type parameter from the URL without validation and passes it to the Overmind-themed AnalystData thread view ele...

CVE-2023-44813

CVE-2023-44813 A reflected cross-site scripting XSS vulnerability in the mode parameter on Invite Friend function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter: mode Exploit - Proof of Concept POC...

CVE-2023-43325

mooSocial: XSS CVE-2023-43325 A reflected cross-site scripting XSS vulnerability exisits in the dataredirecturl parameter on user login function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter:...

WordPress MC4WP: Mailchimp for WordPress plugin <= 4.14.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by nism0 in WordPress Plugin MC4WP versions = 4.14.0...

WordPress LiteSpeed Cache plugin <= 7.9 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by mak3bread in WordPress Plugin LiteSpeed Cache versions = 7.9...

WordPress WP Customer Reviews plugin <= 3.7.8 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Quang in WordPress Plugin WP Customer Reviews versions = 3.7.8...

CVE-2026-9833

CVE-2026-9833 CVE ID: CVE-2026-9833 Vulnerability Type: Cross-Site Scripting XSS – Reflected XSS CWE: CWE-79 – Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Severity: High CISA ADP CVSS v3.1: 7.1 Overview CVE-2026-9833 affects the Tag Groups – Advanced Way to...

cve-2026-41200-stig-manager-oidc-reflected-xss

CVE-2026-41200 — STIG Manager OIDC Reflected XSS PoC Conceptual Proof of Concept for the reflected Cross-Site Scripting XSS vulnerability in STIG Manager versions 1.5.10 through 1.6.7. Vulnerability Summary A reflected XSS vulnerability exists in the STIG Manager Web App OIDC authentication error...

WebGoat.NET

Webgoat.NET Source Code: https://github.com/jerryhoff/WebGoat.NET Download zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master This web application is a learning platform that attempts to teach about common web security flaws. It contains generic security flaws that apply to most web...

ritecms

🛡️ CVE-2024-28623 – XSS Vulnerability in RiteCMS v3.0.0 🔍 Overview This repository documents a Cross-Site Scripting XSS vulnerability discovered in RiteCMS v3.0.0 , which I reported and was assigned the CVE ID CVE-2024-28623. 📄 Vulnerability Details CVE ID : CVE-2024-28623 Product : RiteCMS Versio...

CVE-2020-5142-POC-MB

CVE-2020-5142-POC-MB XSS reflejado encontrado por Burp Suite en varias ubicaciones del dispositivo SonicWall NSA con SonicOS 7.0...

CVE-2023-31705

CVE-2023-31705 description A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter. Vulnerability Type Cross Site Scripting XSS Vendor of Product Sourcecodster Affected Produc...

CVE-2024-42009

CVE-2024-42009 – Reflected XSS in Roundcube Webmail 📌 Overview This repository contains a Nuclei template and supporting resources to safely demonstrate and validate CVE-2024-42009 , a critical reflected XSS vulnerability in Roundcube Webmail. The flaw resides in the messagebody function in...

CVE-2025-56605

CVE-2025-56605 XSS Vulnerabilidad de Cross-Site Scripting CVE-2025-56605 — XSS Reflejado en Event Management System 1.0 Descripción: Existe una vulnerabilidad de Cross-Site Scripting XSS reflejado en register.php de PuneethReddyHC/event-management 1.0. El parámetro POST mobile no se valida...

CVE-2026-93655

The Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpbcautofill' parameter in all versions up to, and including, 11.8.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-93655

The Booking Calendar WordPress plugin is affected by a Reflected Cross-Site Scripting vulnerability via the wpbc_auto_fill parameter in all versions up to and including 11.8.3 . The root cause is insufficient input sanitization and output escaping . An unauthenticated attacker can inject arbitrar...

CVE-2026-0594-ListSiteContributors-Plugin-Exploit

CVE-2026-0594-ListSiteContributors-Plugin-Exploit 🛡️ Description CVE-2026-0594 is a critical Reflected Cross-Site Scripting XSS vulnerability found in the List Site Contributors WordPress plugin. This exploit automates the discovery of vulnerable endpoints via the WordPress REST API wp-json and...

CVE-2025-52357

CVE-2025-52357 : Security Advisory: XSS in FD602GW-DX-R410 Router Admin Console Proof of Concept and Security Advisory for Reflected XSS vulnerability in the FD602GW-DX-R410 fiber router’s admin console firmware V2.2.14. Includes details, impact, and mitigation guidance. Overview A Cross-Site...