Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/11/20 12:21 a.m.•59 views

CVE-2025-51662

A stored cross-site scripting XSS vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input validation allows attackers to inject arbitrary JavaScript code into shared text "codeboxes". The xss payload is automatically executed in the browsers o...

5.4CVSS5.8AI score0.0017EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/19 8:15 p.m.•18 views

CVE-2025-51662

A stored cross-site scripting XSS vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input validation allows attackers to inject arbitrary JavaScript code into shared text "codeboxes". The xss payload is automatically executed in the browsers o...

5.4CVSS0.0017EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/19 12:00 a.m.•1 views

CVE-2025-51662: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input validation allows attackers to inject arbitrary JavaScript code into shared text "codeboxes". The xss payload is automatically executed in the browsers o...

5.4CVSS5.8AI score0.0017EPSS
SaveExploits1References1
OSV
OSV
•added 2025/11/19 12:00 a.m.•12 views

CVE-2025-51662

A stored cross-site scripting XSS vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input validation allows attackers to inject arbitrary JavaScript code into shared text "codeboxes". The xss payload is automatically executed in the browsers o...

5.4CVSS5.8AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/11/19 12:00 a.m.•6 views

CVE-2025-51662

A stored cross-site scripting XSS vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input validation allows attackers to inject arbitrary JavaScript code into shared text "codeboxes". The xss payload is automatically executed in the browsers o...

5.5AI score0.0017EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/09/24 6:31 p.m.•12 views

CVE-2025-58260

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Stored XSS.This issue affects Highlight and Share: from n/a through = 5.1.1...

6.5CVSS5.9AI score0.00204EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/22 7:16 p.m.•12 views

CVE-2025-58260

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Stored XSS.This issue affects Highlight and Share: from n/a through = 5.1.1...

6.5CVSS0.00204EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•10 views

PT-2025-38923

Name of the Vulnerable Software and Affected Versions Ronald Huereca Highlight and Share – Social Text and Image Sharing versions through 5.1.1 Description The software contains a flaw related to improper neutralization of input during web page generation, which allows for Stored Cross-site...

6.5CVSS6.2AI score0.00204EPSS
SaveExploits0References3
Rows per page
Query Builder