CVE-2025-40693

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of user inputs 'tname' parameter via GET and, 'teamleadname', 'teammember' and 'teamname' parameters via POST at the...

PT-2025-37177

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The application suffers from a stored cross-site scripting issue due to insufficient validation of user-supplied data. Specifically, the tname parameter via GET, and the teamleadname,...

CVE-2024-27092

Hoppscotch is an API development ecosystem. Due to lack of validation for fields like Label Edit Team - TeamName, bad actors can send emails with Spoofed Content as Hoppscotch. Part of payload external link is presented in clickable form - easier to achieve own goals by malicious actors. This iss...

CVE-2024-27092: Improper Input Validation

Hoppscotch is an API development ecosystem. Due to lack of validation for fields like Label Edit Team - TeamName, bad actors can send emails with Spoofed Content as Hoppscotch. Part of payload external link is presented in clickable form - easier to achieve own goals by malicious actors. This iss...

WS-2014-0058

In “TEAMMATES/teammates”, versions V4.98 to V5.00 are vulnerable against XSS as a result of an unsanitized courseId, evalName, teamName, toStudent, fromStudent attributes in SubmissionsDb...