CVE-2026-78047

CVE-2026-78047 is a stored cross-site scripting (XSS) vulnerability in WatchGuard Dimension's task scheduling feature (also referenced as "Scheduled Report Task" in the CNA record). A low-privileged authenticated administrator can inject arbitrary HTML or JavaScript into the scheduling fields, an...

CVE-2026-78047 Dimension Stored XSS in Scheduled Report Task

A stored cross-site scripting XSS vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/JavaScript into these fields, which then executes in the browser session of any other user...

CVE-2025-0924-different

Altre vulnerabilità emerse durante l'analisi di CVE-2025-0924 01. Panoramica di Stored XSS, WordPress e WP Activity Log 1 Panoramica di Stored XSS, WordPress e WP Activity Log Lo Stored XSS è una vulnerabilità in cui uno script malevolo viene salvato sul server e, successivamente, viene eseguito...

CVE-2025-25612

CVE-2025-25612: Cross Site Scripting XSS Memorizzato nello Switch FS S3150-8T2F CVE-2025-25612 Lo switch FS Inc S3150-8T2F, precedente alla versione S3150-8T2F2.2.0D135103, è vulnerabile a Cross Site Scripting XSS nella funzionalità Time Range Configuration dell'interfaccia di amministrazione. Un...

CveTest

CveTest Testfall zur Reproduktion des Node.JS V0.10.31 v8 backport CVE-2013-6668 Absturzes. Der Test ruft eine SQL-Stored-Procedure "GetSomething" auf, um Daten aus einer Tabelle "Table1" in der Datenbank "SQLDB" abzurufen. Der Absturz tritt auf, wenn mehr als 52 Zeilen zurückgegeben werden und...

Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46073 Titolo dell'exploit: Vehicle Service Management System - 'Elenco utenti' Stored Cross Site Scripting XSS Autore dell'exploit: SANU P.L CVE: CVE-2021-46073 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xs...

Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS

CVE-2021-46074 Titolo Exploit: Vehicle Service Management System - 'Settings' Cross Site Scripting XSS memorizzato Autore Exploit: SANU P.L CVE: CVE-2021-46074 CVSS: 4.8 MEDIUM Riferimenti: https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss...

Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS

CVE-2021-46070 Titolo dell'exploit: Vehicle Service Management System - 'Service Requests' Stored Cross Site Scripting XSS Autore dell'exploit: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIUM Riferimenti:...

Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS

CVE-2021-46068 Titolo dell'exploit: Vehicle Service Management System - Cross Site Scripting XSS Memorizzato in 'MyAccount' Autore dell'exploit: SANU P.L CVE: CVE-2021-46068 CVSS: 4.8 MEDIUM Riferimenti:...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 Titolo dell'exploit: Vehicle Service Management System - Caricamento 'multiplo' di file porta a Cross-Site Scripting persistente Autore dell'exploit: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM Riferimenti:...

Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS

CVE-2021-45745 Título do Exploit: Bludit 3.13.1 - Cross Site Scripting XSS Armazenado no Plugin About Autor do Exploit: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MÉDIO Referências: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss...

CVE-2024-46982-Reproduction

Per Iniziare 1. Installa Node.js LTS 2. npm install 3. npm run build 4. npm run start Sfruttamento 1: XSS persistente tramite avvelenamento della cache 1. Invia la seguente richiesta HTTP Richiesta d'attacco usando un qualsiasi client HTTP. root@kitploit: GET /poc?nextDataReq=1 HTTP/1.1 Host:...

CVE-2023-37191

CVE-2023-37191 — Issabel PBX 4.0.0-6: Stored Cross-Site Scripting XSS Übersicht...

CVE-2023-37190

CVE-2023-37190 — Issabel-PBX 4.0.0-6: Cross-Site Scripting XSS persistente 📋 Panoramica...

CVE-2023-37189

CVE-2023-37189 — Issabel PBX 4.0.0-6 Cross-Site Scripting XSS Memorizzato Panoramica...

CVE-2023-34838

CVE-2023-34838 — XSS persistente nella eScan Management Console Panoramica Microworld Technologies eScan Management Console versione 14.0.1400.2281 è vulnerabile a un attacco di tipo Cross-Site Scripting persistente Stored XSS. Un attaccante autenticato con accesso alla funzione di gestione dei...

CVE-2026-81931

Unrestricted Upload of File with Dangerous Type in the product photo upload in Roskus Prospero Flow CRM before 5.16.0 allows an authenticated user holding the create product permission routine Seller role to execute arbitrary JavaScript in the application origin. The photo validation rule...

CVE-2026-81731

Frappe 15.11.0 through 16.32.0 stores and renders the workspace card description without XSS filtering. The description field of the Workspace Link doctype is declared with "ignorexssfilter": 1 in frappe/desk/doctype/workspacelink/workspacelink.json, and sanitizecontent in...

CVE-2026-59316

Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When using the DefaultConsentPage, an attacker can craft an OAuth2 authorization request containing a malicious value that is stored server-side and later rendered unencoded in the...

CVE-2026-53579

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the default-on "Safe import" filter sanitizes HTML only for text notes and excludes the book note type, whose content is stored without sanitization and later rendered as HTML, allowing an...