CVE-2021-31761

CVE-2021-31761 Description : Webmin の実行中プロセス機能を介して、反射型クロスサイトスクリプティング XSS 攻撃を悪用し、リモートコマンド実行 RCE を取得する Tested Version : Webmin 1.973 GitHub の最新バージョン 07/03/2021 Attack Type: リモート Impact : リモートコマンド実行 エクスプロイトコード POC : YouTube POC : https://youtu.be/23VvUMu-28c 製品ベンダー : https://www.webmin.com 追加情報 :...

CVE-2025-56605

CVE-2025-56605 XSS（クロスサイトスクリプティングの脆弱性） CVE-2025-56605 — Event Management System 1.0 における反射型XSS 説明: PuneethReddyHC/event-management 1.0 の register.php に、反射型クロスサイトスクリプティング（XSS）の脆弱性が存在します。 mobile POST パラメータは不適切に検証され、レスポンスにそのまま反映されるため、任意の JavaScript コードの注入が可能です。 CVE ID: CVE-2025-56605 発見者: Isroil...

CVE-2023-41425

CVE-2023-41425 説明 Wonder CMS v.3.2.0 から v.3.4.2 におけるクロスサイトスクリプティング（XSS）の脆弱性により、リモートの攻撃者が installModule コンポーネントにアップロードされた細工されたスクリプトを介して任意のコードを実行できる可能性があります。 動作 添付のエクスプロイト「exploit.py」は以下のアクションを実行します： 1. 3つの引数を受け取ります： URL：WonderCMSがインストールされている場所（パスワードを知る必要はありません） IP：攻撃者のマシンのIPアドレス Port...

Reflected-XSS-on-Opentext-Portal-v7.4.4

Cross-site scripting（XSS）の脆弱性がOpenText Portal v7.4.4に存在し、リモートの攻撃者がvgnextoid URIパラメータを介して任意のWebスクリプトまたはHTMLコードを注入できる可能性があります。 攻撃ベクトル: vgnextoidパラメータにおける、"--"（HTMLコメント終了シーケンス）が先行するJavascriptインジェクション 結果: 発見者: Héctor Sainz...

CVE-2020-28351

ShoreTel 19.46.1802.0 反射型跨站脚本攻击 Mitel ShoreTel 19.46.1802.0 设备上的会议组件可能允许未经身份验证的攻击者通过 PATHINFO 对 index.php 进行反射型跨站脚本攻击（XSS），原因是 HOMEMEETING& 页面中的 timezone 对象缺乏充分的验证。 易受攻击的载荷 /index.php/%22%20onmouseover=alertdocument.domain%20?page=HOME 漏洞位于 HOMEMEETINGS& 页面，该页面中有一个 timezone...

CVE-2023-37979

CVE-2023-37979 認証不要の反射型クロスサイトスクリプティング（XSS）の脆弱性、Saturday Drive Ninja Forms Contact Form プラグイン バージョン 3.6.25 以下に影響。 PoC とチェッカー , 教育目的のみ 'python3 exploit.py https://target.com'...

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability エクスプロイト作成者: ersinerenler ベンダーホームページ https://code-projects.org/blood-bank-in-php-with-source-code ソフトウェアリンク https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip 概要 Code-Projects...

CVE-2023-2822-demo

CVE-2023-2822-demo CVE-2023-2822をデモするための意図的に脆弱なWebアプリを実装するシンプルなflaskアプリケーション。 以下の解説記事に基づいています: https://medium.com/@cyberninja717/reflected-cross-site-scripting-vulnerability-in-ellucian-ethos-identity-cas-logout-page-685bb1675dfb。 docker build -t xss-demo . docker run -p :5000 xss-demo 🤖 AILレベル:...

Gutenverse Plugin <= 3.4.6 - Cross-Site Scripting

The Gutenverse plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in versions up to and including 3.4.6. The issue arises due to insufficient input sanitization and output escaping in the rendercontent method of class-search-result-title.php, which outputs...

NextGEN Gallery <= 4.2.3 - Reflected Cross-Site Scripting

NextGEN Gallery through 4.2.3 reflects a URL-decoded nggtag route value into the generated tag page without the context-specific escaping added in 4.2.4. An unauthenticated attacker can break out of the tag context and inject an auto-executing script. This template injects an svg onload payload...

Advance Post Prefix WordPress plugin - Reflected XSS

Advance Post Prefix WordPress plugin through 1.1.1 contains a reflected cross-site scripting caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request. id: CVE-2024-12734 info: name: Advance...

ETQ Reliance - Reflected XSS via SQLConverterServlet

A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...

WP BASE Booking - Reflected XSS

WP BASE Booking of Appointments, Services and Events WordPress plugin 5.0.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before output, letting attackers execute malicious scripts in high privilege users' browsers, exploit requires victim to...

WP Hotel Booking <= 2.3.2 - Cross-Site Scripting

The WP Hotel Booking plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'checkindate' parameter in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

XWiki Platform - Cross-Site Scripting

XWiki Platform versions = 4.2-milestone-3 and = 16.5.0-rc-1 and = 17.0.0-rc-1 and = 4.2-milestone-3 and = 16.5.0-rc-1 and = 17.0.0-rc-1 and 17.3.0-rc-1 are vulnerable to reflected XSS in two templates. The vulnerability allows an attacker to execute malicious JavaScript code in the context of the...

Contact Form Generator <= 2.5.5 - Cross-Site Scripting

The Contact Form Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in wp-admin/admin.php in versions up to, and including, 2.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

WP Dream Carousel < 1.0.1b - Cross-Site Scripting

WP Dream Carousel WordPress plugin 1.0.1b contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires victim to load a...

WordPress Front End Users - Reflected XSS

WordPress Front End Users plugin = 3.2.32 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

WordPress Tourfic Plugin <= 2.11.7 - Cross-Site Scripting

The Tourfic plugin for WordPress is vulnerable to Reflected Cross-Site Scripting XSS in versions up to and including 2.11.7 due to insufficient input sanitization and output escaping in the 'place' parameter. id: CVE-2024-29137 info: name: WordPress Tourfic Plugin = 2.11.7 - Cross-Site Scripting...

Revive Adserver 5.4.1 - Cross-Site Scripting

A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions. id: CVE-2023-38040 info: name: Revive Adserver 5.4.1 - Cross-Site Scripting author: ritikchaddha severity: medium description: | A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions...