CVE-2022-1597

CVE-2022-1597 Il plugin, utilizzato come companion per i temi Discy e Himer, non sanifica e non esegue l'escape di un parametro nel suo modulo di reimpostazione della password, rendendo possibile eseguire attacchi di Cross-Site Scripting Riflesso Plugin interessati: WPQA history.pushState'', '',...

CVE-2023-36163

Exploit Title: BuildaGate5library - Cross-Site Scripting riflesso XSS Data: 06/07/2023 Autore Exploit: Idan Malihi Homepage del fornitore: Nessuna Versione: 5 Testato su: Microsoft Windows 10 Pro CVE: CVE-2023-36163 PoC: Un attaccante deve trovare il parametro vulnerabile mc= e iniettare il codic...

CVE-2022-29598

CVE-2022-29598 : Reflektiertes Cross-Site-Scripting XSS in RSS v500 Mitre-URL: https://vulners.com/cve/CVE-2022-29598 NIST-URL: https://nvd.nist.gov/vuln/detail/CVE-2022-29598 Die RRS v500-Anwendung von Solutions Atlantic ist anfällig für eine reflektierte Cross-Site-Scripting XSS-Schwachstelle...

CVE-2022-23378

CVE-2022-23378 : XSS riflesso in TastyIgniter v3.2.2 CMS per ristoranti Nella dashboard Admin di TastyIgniter versione v3.2.2 è presente una XSS riflessa autenticata. URL Mitre: https://vulners.com/cve/CVE-2022-23378 URL NIST: https://nvd.nist.gov/vuln/detail/CVE-2022-23378 Prova di concetto POC:...

CVE-2021-39408

CVE-2021-39408 Una vulnerabilità di Cross Site Scripting XSS riflesso esiste in più versioni 1.0 dell'applicazione Online Student Rate System che consente l'esecuzione arbitraria di comandi JavaScript. Pagina vulnerabile In index.php, il parametro page è vulnerabile, consentendo a un attaccante d...

CVE-2023-44769_ZenarioCMS--Reflected-XSS---Alias

ZenarioCMS XSS riflesso v.9.4.59197 Autore: Sergio Descrizione: La vulnerabilità di Cross Site Scripting in ZenarioCMS v.9.4.59197 consente a un attaccante locale di eseguire codice arbitrario tramite uno script appositamente creato nel campo Spare aliases di Alias. Vettori di attacco: Sfruttando...

-CVE-2022-48150

-CVE-2022-48150 Encontrei a vulnerabilidade de XSS refletido no Shopware 5 .para mais detalhes, veja meu vídeo PoC...

CVE-2026-71503

Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra fields administration template where the type request parameter is echoed without JavaScript-context encoding into an inline script block and no Content-Security-Policy header is emitted. An unauthenticate...

CVE-2026-30864

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to Reflected Cross-Site Scripting XSS in the dashboard revert functionality. This issue has been fixed in version 3.2.3...

CVE-2024-2387

CVE-2024-2387 Advanced Form Integration – Connetti WooCommerce e Contact Form 7 a Google Sheets e altre piattaforme = 1.82.0 - SQL Injection a Cross-Site Scripting Riflessa tramite integrationid Descrizione Il plugin Advanced Form Integration – Connetti WooCommerce e Contact Form 7 a Google Sheet...

CVE-2026-71503

Dolibarr before 24.0.0 is affected by a reflected cross-site scripting (XSS) vulnerability in the extra fields administration template . The type request parameter is reflected without JavaScript-context encoding into an inline [removed] block, and no Content-Security-Policy header is emitted. An...

EUVD-2026-65075

Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra fields administration template where the type request parameter is echoed without JavaScript-context encoding into an inline script block and no Content-Security-Policy header is emitted. An unauthenticate...

CVE-2026-71503 Dolibarr < 24.0.0 Reflected XSS via Extra Fields Administration Template

Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra fields administration template where the type request parameter is echoed without JavaScript-context encoding into an inline script block and no Content-Security-Policy header is emitted. An unauthenticate...

CVE-2026-30864

Combodo iTop versions prior to 3.2.3 are susceptible to a Reflected Cross-Site Scripting (XSS) vulnerability in the dashboard revert functionality . An authenticated attacker (low privileges) can craft a malicious URL that, when clicked by a victim, executes arbitrary script in the victim's brows...

CVE-2026-30864 Combodo iTop: Reflected XSS in dashboard revert

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to Reflected Cross-Site Scripting XSS in the dashboard revert functionality. This issue has been fixed in version 3.2.3...

WebPort-v1.19.1-Reflected-XSS

WebPort-v1.19.1-Reflected-XSS XSS riflesso in WebPort-v1.19.1 colpisce gli utenti che aprono un link appositamente costruito o una pagina web di terze parti. CVE-2019-12460 https://vulners.com/cve/CVE-2019-12460 PoC-1 Per sfruttare la vulnerabilità, si potrebbe utilizzare una richiesta...

AdTran-Personal-Phone-Manager-Vulns

AdTran-Personal-Phone-Manager-Vulns Un repository che ospita write-up per le vulnerabilità zero-day CVE-2021-25679, CVE-2021-25680 e CVE-2021-25681. Riepilogo CVE-2021-25679: Adtran Personal Phone Manager XSS Memorizzato Autenticato nel modulo di modifica dell'indirizzo email CVE-2021-25680: Adtr...

CVE-2026-76565

Reflected XSS via pricefrom / priceto Filter Parameters in PhocaCart PhocaCart ≤ 6.1.7 — مهاجم غير مصادق يحقن JavaScript عشوائيًا عبر عنوان URL مخصص لفلتر السعر الملخص إصدار PhocaCart 6.1.7 لنظام Joomla عرضة لثغرة XSS المنعكسة Reflected Cross-Site Scripting عبر معاملي GET pricefrom و priceto عند...

CVE-2022-47373

CVE-2022-47373 Vulnerabilità di Cross Site Scripting riflesso in PandoraFMS Exploit Title: Cross Site Scripting riflesso Date: 15/02/2023 Exploit Author: Gaurish Kauthankar Vendor Homepage: https://pandorafms.com/en/ Software Link: https://github.com/pandorafms/pandorafms Version: = v766...

CVE-2023-30777

CVE-2023-30777 Generatore di URL Proof of Concept PoC per una vulnerabilità XSS riflessa nel plugin Advanced Custom Fields di WordPress. PoC generato da: Alucard0x1 Crediti dell'exploit: https://patchstack.com/articles/reflected-xss-in-advanced-custom-fields-plugins-affecting-2-million-sites/...