Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/11/20 12:21 a.m.•65 views

CVE-2025-51662

A stored cross-site scripting XSS vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input validation allows attackers to inject arbitrary JavaScript code into shared text "codeboxes". The xss payload is automatically executed in the browsers o...

5.4CVSS5.8AI score0.00183EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/19 8:15 p.m.•23 views

CVE-2025-51662

A stored cross-site scripting XSS vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input validation allows attackers to inject arbitrary JavaScript code into shared text "codeboxes". The xss payload is automatically executed in the browsers o...

5.4CVSS0.00183EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/11/19 12:00 a.m.•9 views

CVE-2025-51662

A stored cross-site scripting XSS vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input validation allows attackers to inject arbitrary JavaScript code into shared text "codeboxes". The xss payload is automatically executed in the browsers o...

5.9AI score0.00183EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/11/19 12:00 a.m.•18 views

CVE-2025-51662

A stored cross-site scripting XSS vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input validation allows attackers to inject arbitrary JavaScript code into shared text "codeboxes". The xss payload is automatically executed in the browsers o...

5.4CVSS5.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/19 12:00 a.m.•6 views

CVE-2025-51662: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability is found in the text sharing feature of FileCodeBox version 2.2 and earlier. Insufficient input validation allows attackers to inject arbitrary JavaScript code into shared text "codeboxes". The xss payload is automatically executed in the browsers o...

5.4CVSS5.9AI score0.00183EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/24 6:31 p.m.•16 views

CVE-2025-58260

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Stored XSS.This issue affects Highlight and Share: from n/a through = 5.1.1...

6.5CVSS5.8AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/22 7:16 p.m.•15 views

CVE-2025-58260

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Stored XSS.This issue affects Highlight and Share: from n/a through = 5.1.1...

6.5CVSS0.00209EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•13 views

PT-2025-38923

Name of the Vulnerable Software and Affected Versions Ronald Huereca Highlight and Share – Social Text and Image Sharing versions through 5.1.1 Description The software contains a flaw related to improper neutralization of input during web page generation, which allows for Stored Cross-site...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References3
Rows per page
Query Builder