CVE-2026-43876

WWBN AVideo is an open source video platform. In versions up to and including 29.0, objects/notifySubscribers.json.php takes the raw message POST parameter and passes it into sendSiteEmail, which substitutes it directly into an HTML email template via strreplace on the message placeholder and...

trocar.standvirtual.com XSS vulnerability

Vulnerable URL: https://trocar.standvirtual.com/?q=%27%22%3E%3Csvg%2Fonload%3Dconfirm%28%2FOPENBUGBOUNTY%2F%29%3E%5Bcategoryid%5D=%5Border%5D=createdat%3Adesc%5Bstandid%5D= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

warriorboxing.com XSS vulnerability

Vulnerable URL: http://www.warriorboxing.com/clubpage.php?id=13%27%22%3E%3Cscript%3Ealert%28%27OPENBUGBOUNTY%27%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 58205...