CVE-2025-3650

The jQuery Colorbox WordPress plugin (versions through 4.6.3 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the colorbox library failing to sanitize title attributes on links before they are used. An attacker with at least contributor role permissions can exploit this to...

Linux Distros Unpatched Vulnerability : CVE-2019-11199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr ERP/CRM 9.0.1 was affected by stored XSS within uploaded files. These vulnerabilities allowed the execution of a JavaScript payload each time any regul...

CVE-2023-31868

Sage X3 version 12.14.0.50-0 is vulnerable to Cross Site Scripting XSS. Some parts of the Web application are dynamically built using user's inputs. Yet, those inputs are not verified nor filtered by the application, so they mathed the expected format. Therefore, when HTML/JavaScript code is...