CVE-2026-86491

In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads...

CVE-2026-86483

In JetBrains YouTrack before 2026.2.18634 stored XSS via a custom field on Agile board cards was possible...

CVE-2026-86484

In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...

CVE-2021-42662

CVE-2021-42662 CVE-2021-42662 - Stored Cross-Site Scripting vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: A stored XSS vulnerability exists in the Event management software version 2.3.0. An attacker can leverage this vulnerability in order...

EUVD-2026-72507

In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads...

CVE-2026-86491

JetBrains YouTrack versions prior to 2026.2.18634 were affected by a stored XSS vulnerability exploitable through project and organization icon uploads . An attacker with high privileges (e.g., an authenticated user with project or organization admin rights) could inject malicious scripts that ex...

CVE-2026-86491

In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads...

CVE-2026-86491

In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads...

CVE-2026-86484

JetBrains YouTrack before version 2026.2.18634 is vulnerable to a stored cross-site scripting (XSS) flaw caused by AngularJS template injection in assignee names. An authenticated user (low privileges) can craft a malicious assignee name that, when viewed by another user, executes arbitrary scrip...

EUVD-2026-72500

In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...

CVE-2026-86484

In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...

CVE-2026-86484

In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS...

CVE-2026-86483

In JetBrains YouTrack before 2026.2.18634 stored XSS via a custom field on Agile board cards was possible...

CVE-2026-86483

JetBrains YouTrack versions before 2026.2.18634 contained a stored XSS vulnerability exploitable through a custom field on Agile board cards . The CVSS 3.1 score is 5.4 (MEDIUM) , with a changed scope and low impact on both confidentiality and integrity, requiring low privileges and user interact...

EUVD-2026-72499

In JetBrains YouTrack before 2026.2.18634 stored XSS via a custom field on Agile board cards was possible...

CVE-2026-86483

In JetBrains YouTrack before 2026.2.18634 stored XSS via a custom field on Agile board cards was possible...

CVE-2021-38699

CVE-2021-38699 TastyIgniter 3.0.7 permite XSS a través del campo name durante la creación de cuentas de usuario. Existe una vulnerabilidad de Cross Site Scripting Almacenado en múltiples páginas de TastyIgniter v3.0.7 que permite la ejecución arbitraria de JavaScript...

CVE-2024-42009

Exploit XSS para Roundcube Webmail 1.6.7 CVE-2024-42009 Descripción Este script explota una vulnerabilidad XSS almacenada CVE-2024-42009 en Roundcube Webmail versión 1.6.7. Inyecta una carga útil maliciosa en el sistema de webmail que, al activarse, extrae el contenido del correo electrónico de l...

CVE-2024-46982

Next.js Cache Poisoning Exploit This tool automates the detection and exploitation of CVE-2024-46982 , a cache poisoning vulnerability in Next.js , where Server-Side Rendering SSR responses can be incorrectly cached as Static Site Generation SSG. This misconfiguration can lead to Stored XSS, DoS,...

liferay-xss-7.2.1GA2-poc-report-CVE-2020-7934

XSS Almacenado Autenticado en LifeRay 7.2.1 GA2 a través de MyAccountPortlet ejecutado por Resultados de Búsqueda En LifeRay versión 7.1.0 hasta 7.2.1 GA2, los campos de Nombre, Segundo Nombre y Apellido para cuentas de usuario son vulnerables a un problema de XSS Almacenado. Cualquier usuario...