EUVD-2026-65075

Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra fields administration template where the type request parameter is echoed without JavaScript-context encoding into an inline script block and no Content-Security-Policy header is emitted. An unauthenticate...

CVE-2026-71503 Dolibarr < 24.0.0 Reflected XSS via Extra Fields Administration Template

Dolibarr before 24.0.0 contains a reflected cross-site scripting vulnerability in the extra fields administration template where the type request parameter is echoed without JavaScript-context encoding into an inline script block and no Content-Security-Policy header is emitted. An unauthenticate...

CVE-2026-30864

Combodo iTop versions prior to 3.2.3 are susceptible to a Reflected Cross-Site Scripting (XSS) vulnerability in the dashboard revert functionality . An authenticated attacker (low privileges) can craft a malicious URL that, when clicked by a victim, executes arbitrary script in the victim's brows...

CVE-2026-30864 Combodo iTop: Reflected XSS in dashboard revert

Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to Reflected Cross-Site Scripting XSS in the dashboard revert functionality. This issue has been fixed in version 3.2.3...

WebPort-v1.19.1-Reflected-XSS

WebPort-v1.19.1-Reflected-XSS XSS riflesso in WebPort-v1.19.1 colpisce gli utenti che aprono un link appositamente costruito o una pagina web di terze parti. CVE-2019-12460 https://vulners.com/cve/CVE-2019-12460 PoC-1 Per sfruttare la vulnerabilità, si potrebbe utilizzare una richiesta...

AdTran-Personal-Phone-Manager-Vulns

AdTran-Personal-Phone-Manager-Vulns Un repository che ospita write-up per le vulnerabilità zero-day CVE-2021-25679, CVE-2021-25680 e CVE-2021-25681. Riepilogo CVE-2021-25679: Adtran Personal Phone Manager XSS Memorizzato Autenticato nel modulo di modifica dell'indirizzo email CVE-2021-25680: Adtr...

CVE-2026-76565

Reflected XSS via pricefrom / priceto Filter Parameters in PhocaCart PhocaCart ≤ 6.1.7 — مهاجم غير مصادق يحقن JavaScript عشوائيًا عبر عنوان URL مخصص لفلتر السعر الملخص إصدار PhocaCart 6.1.7 لنظام Joomla عرضة لثغرة XSS المنعكسة Reflected Cross-Site Scripting عبر معاملي GET pricefrom و priceto عند...

CVE-2022-47373

CVE-2022-47373 Vulnerabilità di Cross Site Scripting riflesso in PandoraFMS Exploit Title: Cross Site Scripting riflesso Date: 15/02/2023 Exploit Author: Gaurish Kauthankar Vendor Homepage: https://pandorafms.com/en/ Software Link: https://github.com/pandorafms/pandorafms Version: = v766...

CVE-2023-30777

CVE-2023-30777 Generatore di URL Proof of Concept PoC per una vulnerabilità XSS riflessa nel plugin Advanced Custom Fields di WordPress. PoC generato da: Alucard0x1 Crediti dell'exploit: https://patchstack.com/articles/reflected-xss-in-advanced-custom-fields-plugins-affecting-2-million-sites/...

CVE-2023-43355-CMSmadesimple-Reflected-XSS---Add-user

CMSmadesimple XSS Riflesso v2.2.18 Autore: Sergio Descrizione: Multiple vulnerabilità di cross-site scripting XSS in install/adduser.php di CMSmadesimple v.2.2.18 consentono a un attaccante locale di eseguire codice arbitrario tramite uno script manipolato nei campi password e conferma password i...

CVE-2025-12101-checker

CVE-2025-12101-checker सिट्रिक्स NetScaler ADC / Gateway इंस्टेंसेस को CVE-2025-12101 /cgi/logout पर परावर्तित XSS के लिए एक तैयार SAMLResponse + RelayState पेलोड का उपयोग करके जाँचने के लिए सरल Python PoC। ⚠️ इस उपकरण का उपयोग केवल उन सिस्टमों पर करें जिनके आप मालिक हैं या जिनके परीक्षण के लिए...

CVE-2025-52357

CVE-2025-52357 : Advisory di sicurezza: XSS nella console di amministrazione del router FD602GW-DX-R410 Proof of Concept e Advisory di sicurezza per la vulnerabilità di XSS riflesso nella console di amministrazione del router in fibra FD602GW-DX-R410 firmware V2.2.14. Include dettagli, impatto e...

CVE-2026-9833

CVE-2026-9833 CVE-ID: CVE-2026-9833 Art der Schwachstelle: Cross-Site Scripting XSS – Reflektiertes XSS CWE: CWE-79 – Unsachgemäße Neutralisierung von Eingaben während der Webseitengenerierung 'Cross-site Scripting' Schweregrad: Hoch CISA ADP CVSS v3.1: 7.1 Überblick CVE-2026-9833 betrifft das...

-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options

Evolution CMS XSS riflesso v3.2.3 Autore: Sergio Descrizione: Molteplici vulnerabilità di Cross-site scripting XSS riflesso nel processo di installazione di evolution v.3.2.3, nelle opzioni Admin, consentono a un attaccante locale di eseguire script web arbitrari tramite un payload appositamente...

CVE-2023-43872-CMSmadesimple-Arbitrary-File-Upload--XSS---File-Manager

CMSmadesimple File Upload - XSS v2.2.18 Autore: Sergio Descrizione: La vulnerabilità di caricamento file in CMSmadesimple v.2.2.18 consente a un attaccante locale di caricare un file PDF con XSS nascosto. Vettori d'attacco: Una vulnerabilità nella sanitizzazione del caricamento file di File Manag...

CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-

Evolution CMS XSS Riflesso v3.2.3 Autore: Sergio Descrizione: Una vulnerabilità di cross-site scripting XSS riflesso nel processo di connessione dell'installazione di Evolution v.3.2.3 consente a un attaccante locale di eseguire script web arbitrari tramite un payload appositamente creato inietta...

CVE-2026-77993

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...

CVE-2026-77993

The Joomla extension Page Builder CK (joomlack.fr) is affected by a reflected cross-site scripting (XSS) vulnerability via the iscontenttype parameter in versions prior to 3.6.5 . An attacker can craft a malicious URL that, when visited by a user, executes arbitrary script in the victim's browser...

EUVD-2026-64751

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...

CVE-2026-77993 Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...