WordPress Strong Testimonials plugin <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by pbsec in WordPress Plugin Strong Testimonials versions = 3.3.8...

Pluck-CMS-Stored-XSS---Installation

Pluck CMS 4.7.18 格納型XSS 作成者: Sergio 説明: PluckCMS v.4.7.18 のインストールにおける複数のクロスサイトスクリプティング XSS 脆弱性により、ローカル攻撃者が、インストールプロセス - ウェブサイト名において cont1 および cont2 パラメータに注入された細工されたペイロードを介して、任意のコードを実行できる可能性があります。 攻撃ベクトル: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L POC:...

EUVD-2026-60595

Grav: Stored XSS via Markdown audio/video media URL...

EUVD-2026-58646

Grav: Stored XSS via quoted-attribute bypass in detectXss...

CVE-2026-93296

MISP contains a stored cross-site scripting XSS vulnerability in the Overmind theme's statistics views. The event General card eventgeneral.ctp and the server/feed preview card previewgeneral.ctp constructed donut chart legend labels by directly concatenating object name or category keys into an...

CVE-2026-54053

Many Notes , a Markdown note-taking web application, is vulnerable to path traversal via its ZIP vault import (app/Actions/ProcessImportedVault.php) prior to version 0.16.0 . The import accepts archive filenames containing parent-directory traversal segments, allowing an authenticated user to wri...

CVE-2026-54053 Many Notes: Path Traversal via ZIP import allows arbitrary file write and stored XSS in other users' vaults

Many Notes is a Markdown note-taking web application designed for simplicity. Prior to 0.16.0, the ZIP vault import implemented in app/Actions/ProcessImportedVault.php accepts archive filenames containing parent-directory traversal segments. An authenticated user can write arbitrary files outside...

CVE-2026-7222-XSS

教练管理系统中的存储型跨站脚本（XSS）漏洞导致账户劫持 产品 基于 PHP 的教练管理系统（Code-Projects.org） https://code-projects.org/coaching-management-system-in-php-with-source-code/ 受影响组件 /modules/student/complaint.php（投诉提交） /modules/admin/incomingcomplaint.php（投诉查看） 投诉回复功能（管理员/教师 → 学生） 版本 未知（供应商未提供版本信息；测试基于截至2026年4月 Code-Projects.or...

CVE-2026-93296

MISP's Overmind theme contains a stored XSS in its statistics views. The event General card (event_general.ctp) and server/feed preview card (preview_general.ctp) build donut chart legend labels by directly concatenating user-controllable object or category names into an innerHTML string without ...

EUVD-2026-82316

MISP contains a stored cross-site scripting XSS vulnerability in the Overmind theme's statistics views. The event General card eventgeneral.ctp and the server/feed preview card previewgeneral.ctp constructed donut chart legend labels by directly concatenating object name or category keys into an...

CVE-2026-93296 MISP Overmind: Stored Cross-Site Scripting via Unescaped Object Names in Statistics Legends

MISP contains a stored cross-site scripting XSS vulnerability in the Overmind theme's statistics views. The event General card eventgeneral.ctp and the server/feed preview card previewgeneral.ctp constructed donut chart legend labels by directly concatenating object name or category keys into an...

CVE-2026-92986

SiYuan before 3.8.4 renders document titles as HTML in the backlink dock tree without escaping markup characters. Attackers can set malicious titles through the rename API or crafted notebooks to execute scripts in the Electron renderer with access to childprocess for command execution...

CVE-2026-92985

SiYuan versions before 3.8.4 fail to escape bookmark labels imported from notebook files when rendering them in the dock tree. Attackers can craft malicious .sy notebook files with unescaped HTML in bookmark attributes that execute scripts in the Electron renderer with access to childprocess for...

CVE-2026-63459

Vendure is an open-source headless commerce platform. Prior to 3.6.5, RichTextDescriptionCell in packages/dashboard/src/lib/components/shared/table-cell/order-table-cell-components.tsx attempts to strip markup by assigning an administrator-controlled description to a live element's innerHTML and...

CVE-2026-22804

Termix 格納型XSS PoC GHSA-m3cv-5hgp-hv35 このリポジトリには、Termix の格納型クロスサイトスクリプティング XSS 脆弱性に対する Proof of Concept PoC エクスプロイトが含まれています。この脆弱性は、Electron 環境でのローカルファイルインクルージョン LFI やセッションハイジャックにつながる可能性があります。 脆弱性の詳細 アドバイザリ : GHSA-m3cv-5hgp-hv35 コンポーネント : ファイルマネージャー FileViewer.tsx 根本原因 : dangerouslySetInnerHTML を使用...

Vendure has stored XSS in the Admin Dashboard via unsafe HTML-stripping (innerHTML) of entity descriptions

Stored XSS in the Admin Dashboard via unsafe HTML-stripping innerHTML of entity descriptions Package: @vendure/dashboard vendure-ecommerce/vendure, latest master · Summary The dashboard's RichTextDescriptionCell "strips HTML" from an entity's description by assigning it to a live element's...

CVE-2026-63459

Vendure (open-source headless commerce platform) prior to 3.6.5 contains a stored XSS in its Admin Dashboard. The RichTextDescriptionCell component strips HTML by assigning an administrator-controlled description field to a live element's innerHTML and then reading textContent. This pattern still...

CVE-2026-63459 Vendure: Stored XSS in the Admin Dashboard via unsafe HTML-stripping (innerHTML) of entity descriptions

Vendure is an open-source headless commerce platform. Prior to 3.6.5, RichTextDescriptionCell in packages/dashboard/src/lib/components/shared/table-cell/order-table-cell-components.tsx attempts to strip markup by assigning an administrator-controlled description to a live element's innerHTML and...

CVE-2026-63459 Vendure: Stored XSS in the Admin Dashboard via unsafe HTML-stripping (innerHTML) of entity descriptions

Vendure is an open-source headless commerce platform. Prior to 3.6.5, RichTextDescriptionCell in packages/dashboard/src/lib/components/shared/table-cell/order-table-cell-components.tsx attempts to strip markup by assigning an administrator-controlled description to a live element's innerHTML and...

WordPress RT Mega Menu plugin <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'pointermenuitem' Block Attribute vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg versions = 1.5.2...