5 matches found
CVE-2025-45778
CVE-2025-45778 CVE-2025-45778: 인증된 저장형 XSS. The Language Sloth Web Application v1.0의 인증된 저장형 크로스 사이트 스크립팅XSS 취약점으로 인해 공격자가 새 프로젝트를 만들 때 "Description" 텍스트 필드에 조작된 페이로드를 주입하여 임의의 JavaScript 또는 HTML 코드를 실행할 수 있습니다. 페이로드가 주입되면 사용자가 페이지를 열 때마다 페이로드가 트리거됩니다. alert'XSS'와 같은 간단한 페이로드만으로도 저장형 XSS 취약점을 트리거...
EUVD-2025-23374
Malicious code in bioql PyPI...
CVE-2025-45778
A stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description text field...
PT-2025-31655
Name of the Vulnerable Software and Affected Versions The Language Sloth Web Application version 1.0 Description A stored cross-site scripting XSS vulnerability exists in The Language Sloth Web Application. This allows attackers to execute arbitrary web scripts or HTML by injecting a crafted...
CVE-2025-45778
The Language Sloth Web Application v1.0 is affected by a stored XSS in the Description field, allowing an attacker to inject payloads and execute arbitrary scripts when pages are loaded. The issue is identified as CVE-2025-45778 with CVSS v3.1 base score 6.1 (Network, Low attack complexity, No pr...