CVE-2020-9335

Multiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46 WordPress. Successful exploitation of this vulnerability would allow a authenticated admin user to inject arbitrary JavaScript code that is viewed by other users...

CVE-2020-8594

The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninjaformsrecaptchasitekey, ninjaformsrecaptchasecretkey, ninjaformsrecaptchalang, or ninjaformsdateformat...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the MyAccountPortlet fields such as First Name, Middle Name, and Last Name. A user can inject malicious scripts that persist within the database and are executed when other users view these modified fields...

PT-2018-14397

Name of the Vulnerable Software and Affected Versions AlchemyCMS version 4.1.0 Description A Stored XSS issue has been found in AlchemyCMS via the "/admin/pictures" image field. The vendor disputes the validity of this report, stating that the researcher used an authorized cookie to access a...

CVE-2018-14962

zzcms 8.3 has stored XSS related to the content variable in user/manage.php and zt/show.php...

CVE-2018-12992

An issue was discovered CMS MaeloStore V.1.5.0. There is stored XSS in the Telephone field of the admin interface...

CVE-2018-9121

In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post comment...

Stored Cross-Site Scripting Vulnerability in PigCMS Sitewide

PigCms also known as Piggy CMS is a multi-user php + mysql based WeChat marketing source code program developed by Hefei Pisan Internet Information Technology Co. PigCMS has a stored cross-site scripting vulnerability throughout the site. After logging into the system, an attacker inserts malicio...

CVE-2017-9361

WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php...

Stored Cross-Site Scripting Vulnerability in Seeding.com App

The Sowing the Seed App is a pregnancy preparation knowledge platform designed to answer the questions of moms who are preparing for pregnancy and getting pregnant. Sowseed.com App suffers from a stored cross-site scripting vulnerability due to the program's failure to filter user-submitted data...

Stored Cross-Site Scripting Vulnerability in HDWiki

Interactive Wiki open source system HDwiki is Interactive Online Beijing Technology Co., Ltd. of an independent intellectual property rights of the Chinese Wiki Wiki system. HDWiki 6.0 version of the existence of stored cross-site scripting vulnerabilities , the system uses a blacklist mechanism ...