CVE-2023-43877-RiteCMS-Stored-XSS---Home

Rite CMS v3.0 Multiples XSS stockés Auteur : Sergio Description : Rite CMS 3.0 est affecté par une vulnérabilité de type Cross-Site Scripting XSS stocké multiple qui permet aux attaquants d'exécuter du code arbitraire via un payload conçu dans les champs de la page d'accueil du menu Administratio...

CVE-2026-105289 feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFormModel.class.php htmlspecialchars_decode cross site scripting

A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialcharsdecode of the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php of the component Create Customer Endpoint. Performing a manipulation of the argument customerformremark resul...

CVE-2026-105289 feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFormModel.class.php htmlspecialchars_decode cross site scripting

A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialcharsdecode of the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php of the component Create Customer Endpoint. Performing a manipulation of the argument customerformremark resul...

CVE-2026-105289

The feelec-yishu feelcrm-os version 1.0.0 is vulnerable to a Cross-Site Scripting (XSS) flaw within the Create Customer Endpoint component. The root cause is the use of the htmlspecialchars_decode function in the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php. An attacker can initiate...

WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin LearnPress versions = 4.4.9...

CVE-2024-48589

phpAbook 9.0i - ثغرة البرمجة النصية عبر المواقع XSS CVE-2024-48589 الملخص: تم اكتشاف ثغرة البرمجة النصية عبر المواقع XSS في معامل rol في ملف index.php أو في جزء المسار في تطبيق phpAbook. تسمح هذه الثغرة لمهاجم بحقن كود JavaScript تعسفي في متصفح المستخدم، مما قد يؤدي إلى: الكشف عن معلومات حساسة، ب...

CVE-2025-68147-OSPOS-Stored-XSS

CVE-2025-68147: ثغرة البرمجة النصية عبر المواقع المخزّنة XSS في OpenSourcePOS البيانات الوصفية| التفاصيل ---|--- معرّف CVE| CVE-2025-68147 الخطورة| عالية CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N نوع الثغرة| البرمجة النصية عبر المواقع المخزّنة CWE-79 الإصدارات المتأثرة| OpenSourcePOS v3.4.0,...

EUVD-2026-92392

A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php of the component Crm Endpoint. Such manipulation of the argument redirecturl leads to cross site scripting. The atta...

CVE-2021-46069

CVE-2021-46069 एक्सप्लॉइट शीर्षक: वाहन सेवा प्रबंधन प्रणाली - 'मैकेनिक सूची' संग्रहीत क्रॉस साइट स्क्रिप्टिंग XSS एक्सप्लॉइट लेखक: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 मध्यम संदर्भ: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss...

CVE-2026-104807

DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content into the web application. The specific flaw exists within the web portal listening on TCP port 443, under Configuration → Domain...

Important: Red Hat Security Advisory: rhc-worker-script security update

An update for rhc-worker-script is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Presto Player versions = 4.5.2...

CVE-2026-104673 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through...

CVE-2026-104673 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.14.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Stored XSS.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through...

CVE-2026-105056 WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Stored XSS.This issue affects eCommerce Product Catalog: from n/a through 3.6.2...

CVE-2026-105069 WordPress QR Redirector plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nikki Blight QR Redirector qr-redirector allows Stored XSS.This issue affects QR Redirector: from n/a through 2.0.5...

EUVD-2026-92298

DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The specific flaw exists within the web portal listening...

CVE-2026-104807 Mitel MiVoice Office 400 stored Cross-Site Scripting

DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content into the web application. The specific flaw exists within the web portal listening on TCP port 443, under Configuration → Domain...

cve-2020-11023-demonstration

Jquery XSS - CVE-2020-11023 هذا عرض توضيحي لإعادة إنتاج CVE-2020-11023. المصدر مأخوذ بشكل أساسي من هذا المنشور. إعادة الإنتاج قم بتثبيت تبعيات npm باستخدام npm install، إذ يتضمن المشروع jQuery 3.4.1 كاعتمادية. شغّل المشروع باستخدام، على سبيل المثال، live server الخاص بـ VS Code. يحتوي الموقع على...