CVE-2024-39248

Exploit Title: SimpCMS v0.1 - 크로스 사이트 스크립팅 XSS CVE: CVE-2024-39248 Exploit Author: Jason Jacobs 0xjasonjacobs - Twitter Vendor Homepage: https://sourceforge.net/projects/simpcms/ Vulnerable endpoint: /SimpCMS/admin.php SimpCMS v0.1의 크로스 사이트 스크립팅XSS 취약점으로 인해 공격자가 /admin.php의 Title 필드에 삽입된 조작된 페이로드...

CVE-2026-100376

A flaw was found in the MediaWiki TemplateSandbox extension. A remote attacker could exploit this vulnerability by enticing a victim into previewing a page configured with a specially crafted sandbox prefix. This flaw can lead to Cross-Site Scripting XSS, enabling the execution of arbitrary scrip...

CVE-2024-6536

설명 이 스크립트는 WordPress용 Zephyr Project Manager 플러그인에서 XSS 취약점이 존재하는 CVE-2024-6536에 대한 PoC입니다. 인증 및 프로젝트 매니저 관리자project manager administrator 권한이 필요합니다. 사용법 python3 CVE-2024-6536.py -u -p -w 예시: python3 CVE-2024-6536.py -u user -p user -w http://localhost/wordpress 링크...

WordPress oik plugin <= 4.15.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by sequenceX0 in WordPress Plugin oik versions = 4.15.4...

CVE-2025-68461

CVE-2025-68461 스캐너 Roundcube Webmail 설치에서 XSS교차 사이트 스크립팅 취약점을 탐지하는 C++ 보안 스캐너 도구입니다. 영향 사용자 계정에 대한 무단 액세스 세션 하이재킹 데이터 노출 사용자를 대신한 무단 작업 영향을 받는 버전 이 스캐너는 다음 취약한 버전을 확인합니다: 1.5.x 시리즈: 1.5.0 1.5.11 1.6.x 시리즈: 1.6.0 1.6.11 완화 조치 다음으로 업그레이드하세요: Roundcube Webmail 1.5.12 이상 1.5.x의 경우 Roundcube Webmail...

CVE-2026-102292

A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea2a4226deeca27ab1fb9df0552ec76444547811. Affected by this issue is some unknown functionality of the file users.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The...

https-nj.gov---CVE-2020-11022

https-nj.gov---CVE-2020-11022 뉴저지 공식 사이트의 취약점 보고서 jQuery.htmlPrefilter 및 관련 메서드에서 잠재적인 XSS 취약점. 신뢰할 수 없는 소스의 HTML을 정화한 후에도 jQuery의 DOM 조작 메서드즉, .html, .append 등 중 하나에 전달하면 신뢰할 수 없는 코드가 실행될 수 있습니다. 권장 사항 이 문제는 jQuery 3.5.0에서 패치되었습니다. 따라서 jQuery를 업데이트하기만 하면 됩니다. 업데이트하지 않고 이 버그를 수정하려면 다음 코드를 추가할 수...

CVE-2026-102264

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...

CVE-2026-102290

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be...

EUVD-2026-88642

A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea2a4226deeca27ab1fb9df0552ec76444547811. Affected by this issue is some unknown functionality of the file users.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The...

CVE-2026-102292 coolbeans1212 MateisHomePage-Website users.php cross site scripting

A flaw has been found in coolbeans1212 MateisHomePage-Website up to ea2a4226deeca27ab1fb9df0552ec76444547811. Affected by this issue is some unknown functionality of the file users.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The...

CVE-2026-102292

A cross-site scripting (XSS) vulnerability exists in the coolbeans1212 MateisHomePage-Website application. The flaw is located in an unknown functionality within the users.php file, where a remote attacker can manipulate the Search argument to execute the attack. While the product uses continuous...

CVE-2026-102333

A flaw was found in httpdbg. The application fails to validate URL schemes in recorded HTTP request URLs before rendering them as clickable links in the web interface. An attacker who controls traffic recorded by httpdbg can supply a link containing malicious scripts, leading to stored Cross-Site...

CVE-2026-102290

A vulnerability exists in CodeCanyon Rocket LMS up to version 2.2 . The issue resides in an unknown function within the Student Profile Image Upload component, where specific manipulations can lead to Cross-Site Scripting (XSS) . This attack can be executed remotely , and the exploit has been pub...

EUVD-2026-88641

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be...

CVE-2026-102290 CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be...

CVE-2026-102290 CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting

A vulnerability was determined in CodeCanyon Rocket LMS up to 2.2. This affects an unknown function of the component Student Profile Image Upload. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be...

PoC-CVE-2024-24035

CVE-2024-24035 제목: SIL 3.1은 "hmessage" 매개변수에서 크로스 사이트 스크립팅XSS 취약점에 노출되어 있습니다. 날짜: 2024-01-14 작성자: Elizeu Das Dores 공급업체 홈페이지: https://www.setorinformatica.com/ 버전: 3.1 POC CVE-2024-24035 "hmessage" 매개변수는 DOM 기반 크로스 사이트 스크립팅XSS에 취약합니다...

CVE-2026-102264

A cross-site scripting (XSS) vulnerability exists in the Edit Profile Feature of mwasikz robo-cafe-rms (affected up to commit 228c44a02823f04e85db32b7137809a2856148fc). The flaw is located within an unknown function in the frontend/update-account.php file, where manipulating the Name , Address , ...

EUVD-2026-88640

A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f04e85db32b7137809a2856148fc. The impacted element is an unknown function of the file frontend/update-account.php of the component Edit Profile Feature. Performing a manipulation of the argument Name/Address/City results in cros...