CVE-2020-5142-POC-MB

CVE-2020-5142-POC-MB XSS reflejado encontrado por Burp Suite en varias ubicaciones del dispositivo SonicWall NSA con SonicOS 7.0...

CVE-2025-46178

CVE-2025-46178 Existe una vulnerabilidad de Cross-Site Scripting XSS en askquery.php a través del parámetro eid en el CloudClassroom PHP Project. Esto permite a atacantes remotos inyectar JavaScript arbitrario en el contexto de la sesión del navegador de una víctima enviando una URL manipulada, l...

CVE-2020-28414

CVE-2020-28414 Descripción sugerida Existe una vulnerabilidad de Cross-Site Scripting XSS reflejado en TranzWare Payment Gateway 3.1.12.3.2. Un atacante remoto no autenticado puede ejecutar código HTML arbitrario mediante una URL manipulada. Tipo de vulnerabilidad Cross-Site Scripting XSS Vendedo...

poc-cve-xss-encoded-wp-inventory-manager-plugin

Actualización - 5/10/2023 El ID CVE-2023-2123 fue reservado y el PoC fue publicado en el sitio web de WPScan: https://wpscan.com/vulnerability/44448888-cd5d-482e-859e-123e442ce5c1 Detalles Título: Cross-Site Scripting Reflejado No Autenticado en el Plugin WP Inventory Manager para WordPress CMS...

CVE-2023-44812

CVE-2023-44812 A reflected cross-site scripting XSS vulnerability in the adminredirecturl parameter on user login function of mooSocial v3.1.8 which allows attackers to steal admin's session cookies and impersonate their account via a crafted URL. Vulerable Parameter: adminredirecturl Exploit -...

CVE-2021-31862

CVE-2021-31862 SysAid 20.4.74 permite XSS reflejado a través del parámetro KeepAlive.jsp, sin autenticación. Cronología Descubierto: 28 de abril de 2021 Contacto inicial con el proveedor: 28 de abril de 2021 Reportado: 28 de abril de 2021 ID de CVE emitido: 28 de abril de 2021 Contacto secundario...

CVE-2023-45542

CVE-2023-45542 A reflected cross-site scripting XSS vulnerability exisits in the q parameter on search function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL. Vulerable Parameter: q Exploit - Proof of Concept POC Reflect...

CVE-2023-34537---XSS-reflected--found-in-HotelDruid-3.0.5

CVE-2023-34537--- XSS reflejado encontrado en HotelDruid V3.0.5 HotelDruid v3.0.5 es vulnerable a múltiples vulnerabilidades XSS. Estas vulnerabilidades podrían permitir a atacantes remotos autenticados inyectar script web o HTML arbitrario. Este es mi tercer repositorio. No me golpeen si no...

CVE-2025-63499

XSS Reflejado Dirigido en el parámetro theme Investigadores: Arseniy Poblaguev, Daniil Khomichenok Versiones afectadas = 5.12.4 https://github.com/Alinto/sogo/releases/tag/SOGo-5.12.4 Fecha: 02.12.2025 En el parámetro theme existe una vulnerabilidad de XSS Reflejado:...

HW-Pyton-10

CVE-2020-11022 Breve descripción CVE-2020-11022 — vulnerabilidad de tipo XSS reflejado cross-site scripting, relacionada con el manejo incorrecto de la entrada del usuario que se refleja en la respuesta HTML sin escapado. Un atacante puede inyectar código JavaScript que se ejecutará en el navegad...

CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability

CVE-2023-46015-Code-Projects-Blood-Bank-1.0-Reflejado-Cross-Site-Scripting-Vulnerabilidad Autor del Exploit: ersinerenler Página del proveedor https://code-projects.org/blood-bank-in-php-with-source-code Enlace del software...

CVE-2022-24181

CVE-2022-24181 y CVE-2022-26616. probablemente son iguales Open-journal-system-Vulnerabilidad XSS mediante inyección de Host Header y robo del token de restablecimiento de contraseña de otro usuario Pasos para reproducir: 1. Ir a este sitio: https://who's-using-ojs-software.com 2. Capturar esta...

CVE-2026-97276

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VeronaLabs WP Statistics wp-statistics allows Reflected XSS.This issue affects WP Statistics: from n/a through 14.16.14...

CVE-2026-103344

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...

CVE-2026-9833

CVE-2026-9833 CVE ID: CVE-2026-9833 Vulnerability Type: Cross-Site Scripting XSS – Reflected XSS CWE: CWE-79 – Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Severity: High CISA ADP CVSS v3.1: 7.1 Overview CVE-2026-9833 affects the Tag Groups – Advanced Way to...

CVE-2026-103344

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This vulnerability affects versions from n/a through 2.0.20 . Exploitation details ...

CVE-2026-103344 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...

EUVD-2026-92088

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor Free...

CVE-2026-97276

The VeronaLabs WP Statistics plugin for WordPress is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability in versions up to and including 14.16.14 . This flaw stems from the improper neutralization of input during web page generation. While the specific component or function is not ...

CVE-2026-97276 WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VeronaLabs WP Statistics wp-statistics allows Reflected XSS.This issue affects WP Statistics: from n/a through 14.16.14...