CVE-2025-6563

Avviso di vulnerabilità XSS riflesso nella pagina di accesso all'hotspot MikroTik Panoramica È stata scoperta una vulnerabilità di Cross-Site Scripting XSS riflesso nella pagina di accesso all'hotspot MikroTik RouterOS. La vulnerabilità viene innescata tramite il parametro URL dst, che non sanifi...

CVE-2026-81760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from n/a through 3.8.14.2...

CVE-2026-5800

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...

CVE-2026-5953

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...

CVE-2026-1434

CVE-2026-1434: Omega-PSIR è vulnerabile a XSS riflesso tramite il parametro lang. Un attaccante può creare un... Panoramica...

CVE-2026-39200

CVE-2026-39200 — Reflektiertes Cross-Site-Scripting XSS in Toko Online RotI Zusammenfassung Eine reflektierte Cross-Site-Scripting XSS-Sicherheitslücke wurde im Anfrageparameter produk der Webanwendung Toko Online RotI identifiziert. Die Anwendung kodiert die benutzereingegebene Eingabe nicht HTM...

CVE-2024-4041

CVE-2024-4041 Yoast SEO /?page=%22%20onmouseover%3D%22alertdocument.domain%22%20x%3D%22 3. Nella barra di amministrazione, apri il menu Yoast e passa il mouse/fai clic su Get Yoast SEO Premium. 4. JavaScript viene eseguito dal gestore di eventi iniettato , confermando l'XSS riflesso...

CVE-2024-2242

CVE-2024-2242 Contact Form 7...

EUVD-2026-67732

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from n/a through 3.8.14.2...

CVE-2026-81760 WordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from n/a through 3.8.14.2...

CVE-2026-81760

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Crocoblock JetEngine WordPress plugin, affecting versions up to and including 3.8.14.2 . The flaw stems from improper neutralization of input during web page generation , allowing an attacker to inject malicious scripts that execu...

CVE-2022-35499

No Trimble TM4WEB =22.2.0, o endpoint do visualizador de contas externo é vulnerável a cross-site scripting refletido via injeção em um parâmetro arbitrário anexado à URL. Passo 1 : O seguinte exemplo de URL acionará a vulnerabilidade e executará a função javascript alert exibindo o número 1 como...

CVE-2022-35497

In Trimble's TM4WEB =22.2.0, a causa di una errata configurazione di sicurezza degli identificatori di sessione, è possibile recuperare cookie di sessione validi tramite cross-site scripting riflesso che interessa l'endpoint del visualizzatore di documenti esterni. Nello specifico, i tre cookie...

CVE-2023-5024

एक्सप्लॉइट शीर्षक: PLANNO 23.04.04 कमेंट क्रॉस साइट स्क्रिप्टिंग एक्सप्लॉइट लेखक: Angel Metz उर्फ PH03N1XSP विक्रेता होमपेज: Planno सॉफ्टवेयर लिंक: GitHub - PlanningBiblio संस्करण: alert1; 4. स्क्रिप्ट दर्ज हो जाने के बाद, रिफ्लेक्टेड XSS प्राप्त करें। दूसरा तरीका 1. अपने क्रेडेंशियल का उपयोग करक...

CVE-2026-5953 Reflected XSS in Ceviz Informatics's Web Design

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...

EUVD-2026-67723

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...

CVE-2026-5953

Ceviz Informatics Inc. Web Design is affected by a Reflected XSS vulnerability caused by improper input neutralization during web page generation. The issue affects versions through 25082026 . The CVSS 3.1 score is 6.1 (Medium) with a changed scope and low confidentiality/integrity impact. No rem...

CVE-2022-2546

All-in-One WP Migration 7.63 - XSS riflesso non autenticato + CSRF Descrizione Il plugin utilizza un tipo di contenuto errato per la risposta dell'azione ai1wmexport e non esegue un corretto escaping della stessa, consentendo a un attaccante di creare una richiesta che, quando viene inviata da un...

CVE-2026-5800 Reflected XSS in Dayneks Software's E-Commerce Platform

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...

EUVD-2026-67722

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Dayneks Software Industry and Trade Inc. E-Commerce Platform allows Reflected XSS. This issue affects E-Commerce Platform: through 28082026. NOTE: The vendor was contacted early about this disclosu...