256 matches found
quick-lookup-ptrun
Плагин Quick Lookup для PowerToys Run Этот плагин для PowerToys Run позволяет быстро искать IP-адреса, доменные имена, хэши или любые другие данные в списке инструментов кибербезопасности. Он идеально подходит для аналитиков безопасности, пентестеров или любого другого человека, которому необходи...
Bludit CMS <= 3.20.0 - Cross-Site Scripting
Bludit CMS contains a reflected XSS caused by improper sanitization in the search plugin, letting unauthenticated attackers inject arbitrary JavaScript, exploit requires crafted malicious search query. id: CVE-2026-41456 info: name: Bludit CMS = 3.20.0 - Cross-Site Scripting author: 0xAkoko...
CVE-2026-92243
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-92243
The Ivory Search – WordPress Search Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) in all versions up to and including 5.5.18 . The root cause is insufficient input sanitization and output escaping associated with the 's' parameter . This allows unauthenticated attacke...
EUVD-2026-91880
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
PT-2026-104482
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-92243: Improper Neutralization of Input During Web Page Generation
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.18 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the highlight parameter of the search plugin due to insufficient HTML or JavaScript escaping. An attacker can execute arbitrary scripts in the context of a user's browser by enticing a victim to click a craft...
CVE-2026-100521
Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in the search plugin highlight parameter that performs no HTML or JavaScript escaping. Attackers can craft malicious links with injected JavaScript in the highlight parameter that executes in the browser of any visitor...
CVE-2026-100521 Cotonti through 1.0.0 Reflected XSS via search highlight parameter
Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in the search plugin highlight parameter that performs no HTML or JavaScript escaping. Attackers can craft malicious links with injected JavaScript in the highlight parameter that executes in the browser of any visitor...
EUVD-2026-87376
Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in the search plugin highlight parameter that performs no HTML or JavaScript escaping. Attackers can craft malicious links with injected JavaScript in the highlight parameter that executes in the browser of any visitor...
CVE-2026-100521
Cotonti versions through 1.0.0 are vulnerable to a reflected cross-site scripting (XSS) vulnerability within the search plugin highlight parameter . The root cause is the failure to perform proper HTML or JavaScript escaping on this parameter. An attacker can craft a malicious link containing inj...
CVE-2026-100521: Improper Neutralization of Input During Web Page Generation
Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in the search plugin highlight parameter that performs no HTML or JavaScript escaping. Attackers can craft malicious links with injected JavaScript in the highlight parameter that executes in the browser of any visitor...
PT-2026-99147
Name of the Vulnerable Software and Affected Versions Cotonti version 1.0.0 Description A reflected cross-site scripting issue exists in the search plugin. The application fails to perform HTML or JavaScript escaping on the highlight parameter. This allows attackers to create malicious links...
Bludit CMS 3.20.0 Cross Site Scripting
Bludit CMS version 3.20.0 suffers from a cross site scripting vulnerability in the search plugin. Exploit Title: Bludit CMS 3.20.0 - Reflected Cross-Site Scripting Date: 2026-08-11 Exploit Author: Ranjit Kumar Singh Vendor Homepage: https://www.bludit.com/ Software Link:...
Bludit CMS 3.20.0 - Reflected Cross-Site Scripting
Exploit Title: Bludit CMS 3.20.0 - Reflected Cross-Site Scripting Date: 2026-08-11 Exploit Author: Ranjit Kumar Singh Vendor Homepage: https://www.bludit.com/ Software Link: https://github.com/bludit/bludit/archive/refs/tags/3.20.0.zip Version: 3.0.0 through 3.20.0 all versions before commit...
WordPress FiboSearch plugin <= 1.33.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FiboSearch versions = 1.33.0...
WordPress Travel & Tours Meta Search plugin <= 2.3 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by CraCkEr in WordPress Plugin Flights & Hotels Booking WP Plugin versions = 2.3...
