CVE-2025-61996 OPEXUS FOIAXpress stored XSS via annual report template

OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content within the Annual Report Template. Injected content is executed in the context of other users when they generate an Annual Report. Successful exploitation allows the administrative user to perfo...

EUVD-2018-5352

Malware in sbrugna...

EUVD-2020-6036

Malware in sbrugna...

EUVD-2016-9942

Malware in sbrugna...

EUVD-2018-20460

Malware in sbrugna...

EUVD-2020-15770

Malware in sbrugna...

EUVD-2020-17289

Malware in sbrugna...

EUVD-2018-5351

Malware in sbrugna...

EUVD-2021-10049

Malware in sbrugna...

EUVD-2018-17474

Malware in sbrugna...

EUVD-2020-19251

Malware in sbrugna...

EUVD-2021-25503

Malware in sbrugna...

EUVD-2021-0652

Malware in sbrugna...

EUVD-2017-6818

Malware in sbrugna...

EUVD-2018-17248

Malware in sbrugna...

EUVD-2018-0142

Malware in sbrugna...

EUVD-2018-6584

Malware in sbrugna...

EUVD-2012-2750

Malware in sbrugna...

CVE-2025-40649: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS in Biobanking and Biomolecular Resources Negotiator v3.15.2 - European Research Infrastructure BBMRI-ERIC, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request using parameter text in '/api/v3/negotiations/ /posts'...

PT-2025-41199

Name of the Vulnerable Software and Affected Versions OPEXUS FOIAXpress versions prior to 11.13.3.0 Description An administrative user can inject JavaScript or other content into the Annual Report Enterprise Banner image upload field. This injected content is executed when other users generate an...