11 matches found
CVE-2019-20087
GoPro GPMF-parser 1.2.3 has a heap-based buffer over-read in GPMFseekToSamples in GPMF-parse.c for the "matching tags" feature...
EUVD-2025-12260
Malicious code in bioql PyPI...
Cross-site Scripting (XSS)
Overview nasirkhan/laravel-starter is a CMS like modular Laravel starter project. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the tags feature. An attacker can inject malicious JavaScript code by creating or modifying tags with a crafted name. Details...
CVE-2025-26159
Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting XSS in the tags feature. Any user with the ability of create or modify tags can inject malicious JavaScript code in the name field...
CVE-2025-26159
Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting XSS in the tags feature. Any user with the ability of create or modify tags can inject malicious JavaScript code in the name field...
CVE-2025-26159: Improper Neutralization of Input During Web Page Generation
Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting XSS in the tags feature. Any user with the ability of create or modify tags can inject malicious JavaScript code in the name field...
PT-2025-17590 · Unknown · Laravel Starter
Name of the Vulnerable Software and Affected Versions: Laravel Starter version 11.11.0 Description: The issue concerns Cross Site Scripting XSS in the tags feature. Users who can create or modify tags can inject malicious JavaScript code into the name field. Recommendations: For Laravel Starter...
CVE-2025-26159
Laravel Starter 11.11.0 is vulnerable to Cross Site Scripting XSS in the tags feature. Any user with the ability of create or modify tags can inject malicious JavaScript code in the name field...
CVE-2025-26159
The Laravel Starter CMS-like modular project (specifically version 11.11.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) within the tags feature. An attacker with permissions to create or modify tags can inject malicious JavaScript into the name field due to insufficient input sanitization...
Piwigo 跨站请求伪造漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo version 13.6.0, which stems from a problem with the Add Tags feature and can be exploited by...