CVE-2026-92234 QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation Errors

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the...

CVE-2026-92234 QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation Errors

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the...

EUVD-2026-80002

QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the...

CVE-2026-81925

Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, resulting in reflected cross-site scripting. An attacker could execute arbitrary JavaScript in the browser of a user who was tricked into submitting a crafted POST request to...

CVE-2026-81925

Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, resulting in reflected cross-site scripting. An attacker could execute arbitrary JavaScript in the browser of a user who was tricked into submitting a crafted POST request to...

CVE-2026-81925 Concrete CMS below 9.5.3 is vulnerable to Reflected Cross-Site Scripting (XSS) via Conversation Custom Date Format

Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, resulting in reflected cross-site scripting. An attacker could execute arbitrary JavaScript in the browser of a user who was tricked into submitting a crafted POST request to...

EUVD-2026-79939

Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, resulting in reflected cross-site scripting. An attacker could execute arbitrary JavaScript in the browser of a user who was tricked into submitting a crafted POST request to...

CVE-2026-81925 Concrete CMS below 9.5.3 is vulnerable to Reflected Cross-Site Scripting (XSS) via Conversation Custom Date Format

Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, resulting in reflected cross-site scripting. An attacker could execute arbitrary JavaScript in the browser of a user who was tricked into submitting a crafted POST request to...

CVE-2026-82221-PoC

CVE-2026-82221 - RegistrationMagicにおける未認証のReflected XSS 概要 このリポジトリには、RegistrationMagic WordPressプラグインで発見された未認証のReflected Cross-Site Scripting（XSS）脆弱性であるCVE-2026-82221 のProof-of-Concept（PoC）が含まれています。 この脆弱性は、RegistrationMagicの送信（submissions）ページのactivetabパラメータに影響します。...

CVE-2026-25860

CVE-2026-25860 OpenClinic GA 5.247.01 の DICOM 画像アップロードハンドラを介した反射型 XSS この XSS を RCE に連鎖させたい場合は、以下を参照してください: https://www.partywave.site/show/research/cve-2026-25860-openclinic-ga-xss-to-rce 説明 OpenClinic GA = v5.351.19 12/05/2026 には、DICOM 画像アップロードハンドラに反射型クロスサイトスクリプティングの脆弱性が存在し、攻撃者が DICOM...

CVE-2021-20323

CVE-2021-20323 説明 Keycloak 18.0.0 未満かつ 10.0.0 以降には、clients-registrations エンドポイントに反映型 XSS が存在します。このバグは、エンドポイントでサポートされていないパラメータ名をキーとする JSON 構造を POST で送信することでトリガーされます。レスポンスは、エラーメッセージ内に JSON キーを反映し、ヘッダーが Content-Type: text/html に設定されます。ブラウザで実行されると、JSON キー内の HTML コードが解釈され、JavaScript...

CVE-2017-8809_MediaWiki_RFD

CVE-2017-8809 - MediaWiki 用 RFDリフレクテッドファイルダウンロード リモートユーザーは対象サイト向けに特別に細工したURLを作成し、対象ユーザーがそれを読み込むと、'api.php'スクリプトがシェルコマンドを含むファイルをダウンロードさせます CVE-2017-8809。そのファイルは対象サイトによって提供されます。 環境 Google Chrome 79.0 MediaWiki 1.29.1 使用方法 1. 実行 root@kitploit: $ docker-compose up 2. トラップページにアクセス...

CVE-2023-30212-Lab

CVE-2023-30212-Lab GitHub repository with Dockerfile and files to create a vulnerable environment for CVE-2023-30212, enabling exploration of the exploitability of this security vulnerability. Ideal for research and security enthusiasts to study and understand the impact of the vulnerability in a...

CVE-2026-64638

CVE-2026-64638 // XSS2Shell CVE-2026-64638 （ XSS2Shell ）の技術分析と防御的緩和マトリクス。WordPress Core の認証画面におけるパース処理の重大な不整合を悪用し、認証前の反射型 Cross-Site Scripting（XSS）をブラウザのプリミティブと連鎖させ、リモートコード実行（RCE）にまで到達させるものです。 🛠️ エグゼクティブサマリー ベクターID: CVE-2026-64638 コードネーム: XSS2Shell 深刻度: 高（CVSS 4.0: 8.9） CWE分類:...

CVE-2026-87793

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter...

CVE-2025-28073

CVE-2025-28073 제안된 설명 phpList 3.6.3은 /lists/dl.php 엔드포인트를 통해 반사형 교차 사이트 스크립팅XSS 취약점이 있습니다. 공격자는 부적절하게 처리된 id 매개변수를 조작하여 임의의 JavaScript 코드를 주입할 수 있습니다. 취약점 유형 교차 사이트 스크립팅 XSS 제품 공급업체 phpList 영향을 받는 제품 코드 베이스 phpList - 3.6.15 및 이전 버전 가능 영향을 받는 구성 요소 phpList /lists/dl.php, phpList 3.6.15 및 이전 버전 가능 ...

CVE-2026-87793

The "Design Scuole Italia" WordPress theme (versions 1.0–2.18.2 ) contains a Reflected Cross-Site Scripting (XSS) vulnerability in the filters-scheda-didattica.php file. An unauthenticated attacker can execute arbitrary JavaScript in a victim's browser by supplying a malicious value in the archiv...

EUVD-2026-78666

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter...

CVE-2025-12101-checker

CVE-2025-12101-checker Simple Python PoC to check Citrix NetScaler ADC / Gateway instances for CVE-2025-12101 reflected XSS on /cgi/logout using a crafted SAMLResponse + RelayState payload. ⚠️ Use this tool only on systems you own or are explicitly authorized to test. 🔍 Background CVE-2025-12101...

CVE-2026-91922

Steedos Platform through version 3.0.15-beta.47 is affected by a reflected cross-site scripting (XSS) vulnerability in the anonymous /api/page/render endpoint. The root cause is the failure to properly escape query parameters within inline script elements. An attacker can craft malicious links co...