PT-2026-81446

Name of the Vulnerable Software and Affected Versions Reachy Mini versions prior to 1.8.2 Description The Reachy Mini daemon exposes the '/api/media/sounds/upload' endpoint, implemented by the upload sound function, without authentication, file-extension checks, content validation, or size...

CVE-2026-38472

GazellePW (GazellePosterWall) contains a Stored XSS vulnerability in its forum reward comments feature, identified at commit 86c4bedf727691b5a97af42a4864869d18446449 . Remote attackers can inject arbitrary JavaScript through the c parameter in /forums.php?action=ajax_get_jf. The injected payload ...

CVE-2026-38466

CVE-2026-38466 is a Stored XSS vulnerability in GazellePW (GazellePosterWall) , specifically in the torrent remaster custom title feature. The remaster_custom_title parameter is stored unsanitized during torrent upload or edit and later rendered in the torrent title output, allowing remote authen...

PT-2026-81188

The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'mf form id' Widget Setting in all versions up to, and including, 4.1.8 due to insufficient input sanitization and output escaping. This makes it...

PT-2026-81248

The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and including, 3.5.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-38465

GazellePW (GazellePosterWall), a PHP-based poster wall application, is affected by a Stored XSS in the donor avatar mouse-over text feature. The avatar_mouse_over_text parameter is stored and subsequently rendered in an avatar tooltip without sufficient output encoding, allowing remote authentica...

Ekushey Project Manager CRM 5.0 Cross Site Scripting

A persistent cross site scripting vulnerability was identified in Ekushey Project Manager CRM version 5.0. The issue was found in the application settings, specifically the Name field. CVE-2026-26211 — Stored XSS in Ekushey Project Manager CRM Product: Ekushey Project Manager CRM Version: 5.0...

CVE-2026-36214

CVE-2026-36214 – Gespeichertes Cross-Site-Scripting XSS in osTicket über anfällige Bootstrap-Tooltip-Komponente Beschreibung Enhancesoft osTicket-Versionen von 1.10 bis 1.17.7 und von 1.18.0 bis 1.18.3 werden mit der bekannten anfälligen Bootstrap-Tooltip-3.3.4-Komponente CVE-2019-8331...

CVE-2023-44765_ConcreteCMS-Stored-XSS---Associations

ConcreteCMS XSS v2.2.18 Autor: Sergio Beschreibung: Eine Cross-Site-Scripting-Schwachstelle in ConcreteCMS v.9.2.1 ermöglicht es einem lokalen Angreifer, beliebigen Code über ein manipuliertes Skript im Plural Handle der Data Objects unter System & Settings auszuführen. Angriffsvektoren: Skriptin...

Appsmith-1.98-Stored-XSS-Exploit

CVE-2026-7299 - Appsmith 1.98 XSS Memorizzato Sink innerHTML di Autocompletamento SQL Exploit automatico per una vulnerabilità di cross-site scripting memorizzato nell'editor di query SQL di Appsmith. Uno sviluppatore del workspace può iniettare JavaScript arbitrario tramite nomi di tabelle del...

CVE-2024-48246

CVE-2024-48246 Vehicle Management System 1.0 - Cross-Site Scripting XSS memorizzato Descrizione Vehicle Management System 1.0 contiene una vulnerabilità di Cross-Site Scripting XSS memorizzato nel parametro Name di /vehicle-management/booking.php. Un attore malintenzionato può iniettare payload...

Sakai Conversations has a Stored XSS Issue

Summary The Sakai Conversations tool stores topic and post messages without HTML sanitization, and the frontend renders them using LitElement's unsafeHTML directive, resulting in stored cross-site scripting XSS. Any authenticated user with access to a site that has the Conversations tool enabled...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-10104-POC

CVE-2026-10104: Cross-Site Scripting Armazenado em Product Video Gallery para WooCommerce Resumo...

CVE-2026-40791-WP-Time-Slots-Booking-Form-XSS

CVE-2026-40791: Um Slot de Reserva para XSS de Administrador Encontrei um XSS armazenado não autenticado no plugin WordPress WP Time Slots Booking Form. Uma submissão pública de reserva controla parte do valor armazenado do horário slot. O plugin posteriormente imprime esse valor na página de...

EUVD-2026-65062

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-78541 Command Injection in Parent Control of TP-Link Archer BE3600 v1

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

AdTran-Personal-Phone-Manager-Vulns

AdTran-Personal-Phone-Manager-Vulns Un repository che ospita write-up per le vulnerabilità zero-day CVE-2021-25679, CVE-2021-25680 e CVE-2021-25681. Riepilogo CVE-2021-25679: Adtran Personal Phone Manager XSS Memorizzato Autenticato nel modulo di modifica dell'indirizzo email CVE-2021-25680: Adtr...

CVE-2026-76837 Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name

Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ stores the firstname value verbatim, and the mention renderer in web-frontend/modules/core/editor/mention.js builds its element with a template literal that places the name...

CVE-2026-76837

Baserow before 2.3.0 is vulnerable to stored cross-site scripting via the rich-text mention feature. The display name set through PATCH /api/user/account/ is interpolated without HTML encoding into the mention element built in mention.js. A name containing a double quote breaks out of the data-la...