1213180 matches found
CVE-2025-65881
CVE-2025-65881 Il progetto Zoo Management System v1.00 è vulnerabile a Cross-site scripting XSS su /zms/classes/Login.php?f=login a causa di: 1. Content-type non valido delle risposte JSON su /zms/classes/Login.php?f=login 2. Input utente non sanificato nelle risposte Consentendo a attaccanti non...
CVE-2025-57310
CVE-2025-57310 Eine Cross-Site Request Forgery CSRF-Schwachstelle in Salmen2/Simple-Faucet-Script v1.07 über eine manipulierte POST-Anfrage an admin.php?p=ads&c=1, die es Angreifern ermöglicht, beliebigen Code auszuführen. CWE CWE-352: Cross-Site Request Forgery CSRF CVSS v3.1 Basis-Score: 8.8 Ho...
CVE-2018-25031
POC di Cross-Site Scripting nello Swagger UI: CVE-2018-25031 utilizzando Selenium in Python Questo repository contiene uno script Python che dimostra una prova di concetto POC di una vulnerabilità di Cross-Site Scripting XSS nello Swagger UI, utilizzando la libreria Selenium. L'obiettivo di quest...
CVE-2023-32961
CVE-2023-32961 Questa repository riguarda la vulnerabilità XSS nel plugin Wordpress Zotpress. Dettagli del componente Nome del componente Zotpress Versione vulnerabile ≤ 7.3.3 Slug del componente zotpress Link del componente https://wordpress.org/plugins/zotpress/ Prerequisito Non autenticato...
CVE-2023-29439
CVE-2023-29439 Dieses Repository behandelt eine XSS-Sicherheitslücke im WordPress-Foogallery-Plugin. Details zur Schwachstelle Beschreibung In Foogallery 2.2.35 und früher ist die Funktion foogalleryimageeditormodal in foogallery/includes/admin/class-gallery-attachment-modal.php anfällig für...
CVE-2025-56515
CVE-2025-56515 Vulnerabilità di Cross-Site Scripting XSS nell'applicazione di chat Fiora CVE-2025-56515: Vulnerabilità di Cross-Site Scripting XSS nell'applicazione di chat Fiora Panoramica della vulnerabilità ID CVE : CVE-2025-56515 Tipo di vulnerabilità : Cross-Site Scripting XSS Tipo di attacc...
CVE-2026-81733
WWBN AVideo through version 30.0 (and master up to commit 4cb576e) is affected by a cross-site request forgery (CSRF) vulnerability in plugin/Live/myLiveControls.save.json.php. The endpoint accepts customUrl, customMessage, and autoRedirect parameters via a GET request and only verifies that the ...
CVE-2026-81733 WWBN AVideo through 30.0 CSRF via myLiveControls.save.json.php
WWBN AVideo through 30.0 and master up to commit 4cb576e contains a cross-site request forgery vulnerability in plugin/Live/myLiveControls.save.json.php. The endpoint only checks that a user is logged in and processes customUrl, customMessage, and autoRedirect parameters from $REQUEST via a GET...
CVE-2024-40512
CVE-2024-40512 Cross-Site-Scripting-Schwachstelle in openPetra v.2023.02 über die Funktion serverMReporting.asmx. Beschreibung : Ein nicht authentifizierter Benutzer kann Cookies von authentifizierten Benutzern stehlen, indem er eine XSS-Sicherheitslücke in openPetra v.2023.02 über die Funktion...
CVE-2024-40510
CVE-2024-40510 Cross-Site-Scripting-Sicherheitslücke in openPetra v.2023.02 über die serverMCommon.asmx-Funktion. Beschreibung : Ein nicht authentifizierter Benutzer kann Cookies von authentifizierten Benutzern stehlen, indem er eine XSS in openPetra v.2023.02 über die serverMCommon.asmx-Funktion...
CVE-2024-40509
CVE-2024-40509 Cross-Site-Scripting-Sicherheitslücke in openPetra v.2023.02 über die Funktion serverMFinDev.asmx. Beschreibung : Ein nicht authentifizierter Benutzer kann Cookies von authentifizierten Benutzern stehlen, indem er eine XSS-Schwachstelle in openPetra v.2023.02 über die Funktion...
CVE-2024-40508
CVE-2024-40508 Cross-Site-Scripting-Schwachstelle in openPetra v.2023.02 über die Funktion serverMConference.asmx. Beschreibung : Ein nicht authentifizierter Benutzer kann Cookies von authentifizierten Benutzern stehlen, indem er eine XSS-Schwachstelle in openPetra v.2023.02 über die Funktion...
CVE-2024-40507
CVE-2024-40507 Vulnerabilità di Cross Site Scripting in openPetra v.2023.02 tramite la funzione serverMPersonnel.asmx. Descrizione : Un utente non autenticato può rubare i cookie a un utente autenticato, sfruttando una XSS in openPetra v.2023.02 tramite la funzione serverMPersonnel.asmx. Versione...
CVE-2024-40506
CVE-2024-40506 Vulnerabilità Cross Site Scripting in openPetra v.2023.02 tramite la funzione serverMHospitality.asmx. Descrizione : Un utente non autenticato può rubare i cookie di un utente autenticato sfruttando una XSS in openPetra v.2023.02 tramite la funzione serverMHospitality.asmx. Version...
CVE-2024-34958
CVE-2024-34957 idccms CSRF PoC CVE-2024-34958 idccms CSRF PoC...
CVE-2026-9548
An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write restricted files and conduct limited denial-of-service attacks...
CVE-2026-82123
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Tangible Loops & Logic...
CVE-2026-78238
SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product...
CVE-2026-79996
The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its login settings, allowing authenticated users who have been granted a User Registration & Membership WordPress plugin before 5.2.6 management capability but not full administrator...