1157929 matches found
CVE-2023-43877-RiteCMS-Stored-XSS---Home
Rite CMS v3.0 Множественные сохранённые XSS Автор: Sergio Описание: Rite CMS 3.0 подвержена множественной сохранённой уязвимости межсайтового скриптинга XSS, позволяющей злоумышленникам выполнить произвольный код с помощью специально созданной полезной нагрузки в полях главной страницы в меню...
CVE-2024-48589
phpAbook 9.0i - Vulnérabilité Cross-Site Scripting XSS CVE-2024-48589 Résumé : Une vulnérabilité Cross-Site Scripting XSS a été découverte dans le paramètre rol de index.php ou dans la section du chemin dans l'application phpAbook. Cette vulnérabilité permet à un attaquant d'injecter du code...
CVE-2025-68147-OSPOS-Stored-XSS
CVE-2025-68147: Межсайтовый скриптинг XSS с сохранением в OpenSourcePOS Метаданные| Подробности ---|--- Идентификатор CVE| CVE-2025-68147 Серьезность| Высокая CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N Тип уязвимости| Межсайтовый скриптинг с сохранением CWE-79 Затронутые версии| OpenSourcePOS...
EUVD-2026-88200
Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=comvirtuemart&page=admin.userlist'. Successful exploitation of this vulnerability could allow an authenticated...
CVE-2021-46069
CVE-2021-46069 Titre de l'exploit : Vehicle Service Management System - 'Mechanic List' Stored Cross Site Scripting XSS Auteur de l'exploit : SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM Références :...
CVE-2026-82546
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows an unauthenticated remote attacker to store a crafted comment-author URL through the incoming Trackback endpoint when a published entry accepts comments and Trackbacks. The shipped...
CVE-2026-91204
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows an anonymous remote attacker to store a comment containing a javascript: URI link that survives HTML comment formatting and can execute script in the browser of a visitor who clicks it...
CVE-2026-82387
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a user with media-upload rights to store active content on Roller's origin, because the media upload feature trusts the upload-supplied content type and serves the stored file back wit...
CVE-2026-82381
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a user with authoring rights on a weblog to store crafted content that is later written into the authoring UI's JavaScript string literals and markup sinks without proper encoding,...
cve-2020-11023-demonstration
Jquery XSS - CVE-2020-11023 Ceci est une démonstration de la reproduction de CVE-2020-11023. La source provient principalement de cet article de blog. Reproduire Installez les dépendances npm avec npm install, jQuery 3.4.1 est inclus comme dépendance. Exécutez le projet avec, par exemple, live...
EUVD-2026-88140
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a user with authoring rights on a weblog to store crafted content that is later written into the authoring UI's JavaScript string literals and markup sinks without proper encoding,...
CVE-2026-82381
Apache Roller version 6.1.5 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. An attacker with authoring rights on a weblog can store crafted content that is injected into the authoring UI's JavaScript string literals and...
EUVD-2026-88139
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting against a visitor to a weblog using the bundled frontpage theme, by supplying a crafted blog-directory parameter that the...
CVE-2021-46072
CVE-2021-46072 Titre de l'exploit: Vehicle Service Management System - 'Service List' Cross-Site Scripting XSS stocké Auteur de l'exploit: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MOYEN Références: https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss...
CVE-2026-82387 Apache Roller: Stored cross-site scripting via uploaded media content type
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a user with media-upload rights to store active content on Roller's origin, because the media upload feature trusts the upload-supplied content type and serves the stored file back wit...
CVE-2026-82387 Apache Roller: Stored cross-site scripting via uploaded media content type
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a user with media-upload rights to store active content on Roller's origin, because the media upload feature trusts the upload-supplied content type and serves the stored file back wit...
EUVD-2026-88128
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows a user with media-upload rights to store active content on Roller's origin, because the media upload feature trusts the upload-supplied content type and serves the stored file back wit...
CVE-2026-82546 Apache Roller: Stored cross-site scripting through incoming Trackback links
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows an unauthenticated remote attacker to store a crafted comment-author URL through the incoming Trackback endpoint when a published entry accepts comments and Trackbacks. The shipped...
CVE-2026-82546 Apache Roller: Stored cross-site scripting through incoming Trackback links
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows an unauthenticated remote attacker to store a crafted comment-author URL through the incoming Trackback endpoint when a published entry accepts comments and Trackbacks. The shipped...
CVE-2026-91204 Apache Roller: Stored javascript: URI in HTML comments
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 6.1.5 allows an anonymous remote attacker to store a comment containing a javascript: URI link that survives HTML comment formatting and can execute script in the browser of a visitor who clicks it...