CVE-2024-41503

CVE-2024-41503 CVE: CVE-2024-41503 Software: Jetimob Plataforma Imobiliaria CRM/ERP/CMS Version: 20240627-0 Vulnerability: Stored Cross-Site Scripting XSS Description: The "Busca" search function used throughout the application contains a filter option that can be saved - when saving it, there is...

CVE-2026-36392

CVE-2026-36392: XSS almacenado en el campo de título de elementos de RISE CRM Resumen Existe una vulnerabilidad de cross-site scripting XSS almacenado en el campo de título de elementos de RISE CRM RISE - Ultimate Project Manager & CRM versiones = 3.9.6. Un administrador autenticado puede inyecta...

CVE-2023-43357-CMSmadesimple-Stored-XSS---Shortcut

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title in the My Preferences - Manage Shortcuts Attack Vectors: Scripting A vulnerability in the...

EUVD-2026-92178

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=update. The manipulation of the argument Title results in sql injection. The attack may be...

CVE-2026-105182

A security flaw exists in SourceCodester Online Reviewer Management System 1.0 within the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=update. An SQL injection vulnerability is triggered by manipulating the Title argument. This flaw can be exploited remotely, and the ex...

PT-2026-104711

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer 0/admins/assessments/activities/btn functions.php?action=update. The manipulation of the argument Title results in sql injection. The attack may be...

CVE-2023-43358-CMSmadesimple-Stored-XSS---News

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title in the Content - News Menu. Attack Vectors: Scripting A vulnerability in the sanitization o...

CVE-2025-54352

CVE-2025-54352 PoC Usage Steps to install and test the WordPress PoC: 1. Install a fresh version of WordPress using Docker: 1.1 Start the MySQL database container: docker run --name wp-db -e MYSQLDATABASE=wp-db -e MYSQLUSER=wpuser -e MYSQLPASSWORD=password -e MYSQLROOTPASSWORD=rootpass -d...

CVE-2025-66024

CVE-2025-66024: XWiki Blog Application home page vulnerable to Stored XSS via Post Title Overview Field| Details ---|--- CVE ID| CVE-2025-66024 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products org.xwiki.contrib.blog:application-blog-ui versions: alert'XSS in...

CVE-2023-44758_GDidees-CMS-Stored-XSS---Title

GDidees Stored XSS v3.0 Author: Sergio Description: Cross Site Scripting vulnerability in GDidees v.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Page Title. Attack Vectors: Scripting A vulnerability in the sanitization of the entry in the Page Title allows...

CVE-2023-31584

CVE-2023-31584 - Cross Site Scripting vulnerability in cu/silicon Github link: https://github.com/cu/silicon Version Affected: 1 Severity and CVSS: Will update when review is done by NIST. Type: Cross Site Scripting Root Cause: Lack of proper input validation and sanitization before inserting...

CVE-2026-93430

The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrtslivehandler AJAX in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-93430

The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.7.1 . The root cause is insufficient input sanitization and output escaping within the gdrts_live_handler AJAX action, specifically affecting the 'title' and 'url' Re...

EUVD-2026-91922

The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrtslivehandler AJAX in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-93430 GD Rating System <= 3.7.1 - Unauthenticated Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX

The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrtslivehandler AJAX in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-92977

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

EUVD-2026-91892

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2026-15253

CVE-2026-15253 Easy Media Replace = 0.2.0 - Cross-Site Scripting Almacenado Autenticado Author+ Descripción El plugin Easy Media Replace es vulnerable a Cross-Site Scripting Almacenado XSS a través del título del archivo adjunto multimedia. Cuando un Author renombra un archivo multimedia utilizan...

CVE-2026-93430: Improper Neutralization of Input During Web Page Generation

The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrtslivehandler AJAX in all versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2026-92977: Improper Neutralization of Input During Web Page Generation

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...