CVE-2026-79315

A reflected cross-site scripting vulnerability exists in x-ui 0.3.2. The management interface reflects the raw request URI into a client-side template binding expression used for sidebar menu highlighting. Server-side HTML entity escaping is ineffective in this context: the browser decodes the...

EUVD-2026-84465

A reflected cross-site scripting vulnerability exists in x-ui 0.3.2. The management interface reflects the raw request URI into a client-side template binding expression used for sidebar menu highlighting. Server-side HTML entity escaping is ineffective in this context: the browser decodes the...

CVE-2026-79315

A reflected cross-site scripting (XSS) vulnerability exists in x-ui 0.3.2 . The management interface reflects the raw request URI into a client-side template binding expression used for sidebar menu highlighting. Because the browser decodes HTML entities before the client-side framework evaluates...

CVE-2024-40604

An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu entries...

CVE-2024-40604: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu entries...

PT-2024-28941

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.42.1 and earlier Description An issue was discovered in the Foreground skin for MediaWiki. There is stored XSS via MediaWiki: Sidebar top-level menu entries. Recommendations For MediaWiki versions 1.42.1 and earlier,...

CVE-2024-40604

An issue was discovered in the Nimbus skin for MediaWiki through 1.42.1. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu entries...

PT-2024-28940

Name of the Vulnerable Software and Affected Versions MediaWiki versions through 1.42.1 Description An issue was discovered in the Nimbus skin for MediaWiki. There is Stored XSS via MediaWiki:Nimbus-sidebar menu and submenu entries. Recommendations For versions through 1.42.1, consider disabling...