sudowp-clickfunnels-zurich

SudoWP Zurich para ClickFunnels Colaboradores: SudoWP, WP Republic Autores originales: Etison, LLC Tags: clickfunnels, security-patch, legacy, landing pages, funnels, sudowp Requiere al menos: 4.3 Probado hasta: 6.7 Versión estable: 0.1.1 Licencia: GPLv2 o posterior Aviso de seguridad Este es un...

CVE-2025-12163

CVE-2025-12163: Cross-Site Scripting Almacenado en el Plugin Omnipress de WordPress Tabla de Contenidos Resumen Detalles de la Vulnerabilidad Análisis Técnico Vector de Ataque Guía de Mitigación...

EUVD-2026-81316

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Shortcode Attributes in all versions up to, and including, 1.8.44 due to insufficient input sanitization and output escaping. This makes it possible for authenticat...

CVE-2026-86311

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin (versions up to and including 1.8.44 ) is vulnerable to Stored Cross-Site Scripting (XSS) via its Shortcode Attributes due to insufficient input sanitization and output escaping. According to the initial description, the ...

CVE-2026-5615

CVE-2026-5615 — VvvebJs Stored Cross-Site Scripting RXSS Overview This repository contains a Python proof-of-concept PoC script demonstrating a Stored Cross-Site Scripting RXSS vulnerability affecting VvvebJs ⚠️ This project is intended strictly for authorized security testing , educational...

CVE-2026-26211

-orange?style=for-the-badge&logo=owasp CVE-2026-26211: Stored XSS in Ekushey Project Manager CRM Product: Ekushey Project Manager CRM Version: 5.0 Vulnerability: Stored Cross-Site Scripting XSS CWE: CWE-79 Researcher: LINDAN TRI SAPUTRA Initial Report: August 1, 2026 Summary A stored Cross-Site...

CVE-2024-39123-Exploit

CVE-2024-39123: Stored XSS in Calibre-web 0.6.21 Exploit Details Exploit Title : Stored XSS in Calibre-web Date : 2024-05-07 Exploit Authors : Catalin Iovita & Alexandru Postolache Pentest-Tools.com Vendor Homepage : Calibre-web GitHub Repository Version : 0.6.21 - Romesa Tested on : Linux...

CVE-2024-40111-Exploit

CVE-2024-40111: Stored Cross-Site Scripting XSS in Automad 2.0.0-alpha.4 Exploit Details Exploit Title : Stored Cross-Site Scripting XSS in Automad 2.0.0-alpha.4 Date : 2024-06-20 Exploit Author : Jerry Thomas w3bn00b3r Vendor Homepage : Automad Software Link : Automad GitHub Repository Category ...

CVE-2023-7173

CVE-2023-7173: Stored Cross-Site Scripting XSS in Hospital Management System Vulnerability Details CVE ID: CVE-2023-7173 Vulnerability Type: Stored XSS Affected Component: User login page Vulnerable Parameter: Fullname Ventor Details: phpgurukul.com Vulnerable Version: Hospital Management System...

CVE-2021-46005

CVE-2021-46005 All Details about CVE-2021-46005 Software: Online Car Rental System 1.0 Software Link: https://www.sourcecodester.com/cc/14145/online-car-rental-system-using-phpmysql.html Vulnerability Type: Stored Cross Site Scripting Affected Component: vehicalorcview in post-avehical page Impac...

CVE-2026-25596

CVE-2026-25596 — Stored XSS via Product Unit Name in InvoicePlane 1.7.0 Vulnerability: Stored Cross-Site Scripting XSS via Product Unit Name field Product: InvoicePlane Affected Version: 1.7.0 and likely prior versions Severity: Medium CVSS 3.1 Score: 4.8...

CVE-2026-25595

CVE-2026-25595 — Stored XSS via Invoice Number in InvoicePlane 1.7.0 Vulnerability: Stored Cross-Site Scripting XSS via Invoice Number field Product: InvoicePlane Affected Version: 1.7.0 and likely prior versions Severity: Medium CVSS 3.1 Score: 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CW...

CVE-2026-25594

CVE-2026-25594 — Stored XSS via Family Name in InvoicePlane 1.7.0 Vulnerability: Stored Cross-Site Scripting XSS via Family Name field Product: InvoicePlane Affected Version: 1.7.0 and likely prior versions Severity: Medium CVSS 3.1 Score: 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CWE:...

CVE-2026-30862

CVE-2026-30862 PoC - Privilege Escalation in Appsmith Proof-of-Concept for Privilege Escalation in Appsmith via Stored XSS Disclosure: Originally reported by me via GHSA-5hw4-whxv-6794 ⚠️ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID| CVE-2026-30862...

CVE-2024-57487-and-CVE-2024-57488

オンラインカー・レンタルシステムの脆弱性 このリポジトリには、Code-Projects Online Car Rental System プロジェクト バージョン 1.0 で特定された脆弱性の詳細が含まれています。これらの脆弱性には CVE が割り当てられており、問題の理解と緩和に役立つ包括的なライトアップが含まれています。 脆弱性 1. ファイルアップロードによるリモートコード実行（認証済み） CVE-ID: CVE-2024-57487 説明: この脆弱性により、認証済みの攻撃者が悪意のある PHP ファイルをアップロードし、サーバー上でリモートコマンド実行を可能にします。...

CVE-2026-7401-XSS

CET自動採点システムの保存型XSS — 学生登録（未認証 → 管理者ダッシュボード） 詳細...

CVE-2026-7089-XSS

home-service-system-unauth-stored-xss-admin-takeover Vulnerability Details...

CVE-2026-6184-stored-XSS

Stored XSS in News Title - Simple Content Management System PHP Description A Stored Cross-Site Scripting XSS vulnerability exists in Simple Content Management System PHP. The News Title field in the admin panel does not sanitize user input before storing it in the database and reflecting it on t...

CVE-2026-10289-XSS

酒店与旅游预订系统 - 存储型跨站脚本（XSS） 漏洞详情 字段| 详情 ---|--- 标题| 酒店与旅游预订系统 - 存储型跨站脚本（XSS） CVE ID| 待分配 厂商| code-projects.org 厂商 URL| https://code-projects.org/hotel-and-tourism-reservation-in-php-with-source-code/ 产品| 酒店与旅游预订系统 版本| 1.0 漏洞类型| 存储型跨站脚本 CWE| CWE-79 CVSS 评分| 8.3（高危） CVSS 向量|...

CVE-2026-3228

CVE-2026-3228 - NextScripts WordPress Plugin Stored XSS Scanner & Exploit https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/WordPress-Plugin-red Author: NULL200OK A comprehensive Python tool to scan for and exploit...