8192 matches found
CVE-2025-1807: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
A vulnerability, which was classified as problematic, was found in Eastnets PaymentSafe 2.5.26.0. This affects an unknown part of the file /directRouter.rfc of the component Edit Manual Reply Handler. The manipulation of the argument Title leads to basic cross site scripting. It is possible to...
Formwork has a cross-site scripting (XSS) vulnerability in Site title
Summary The site title field at /panel/options/site/allows embedding JS tags, which can be used to attack all members of the system. This is a widespread attack and can cause significant damage if there is a considerable number of users. Impact The attack is widespread, leveraging what XSS can do...
Cross-site Scripting (XSS)
Overview getformwork/formwork is an a file-based Content Management System CMS to make and manage simple sites. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the title field in the panel/options/site page. An attacker can exploit this vulnerability by embedding...
GHSA-VF6X-59HH-332F Formwork has a cross-site scripting (XSS) vulnerability in Site title
Summary The site title field at /panel/options/site/allows embedding JS tags, which can be used to attack all members of the system. This is a widespread attack and can cause significant damage if there is a considerable number of users. Impact The attack is widespread, leveraging what XSS can do...
PT-2025-9201 · Formwork · Formwork
Name of the Vulnerable Software and Affected Versions: Formwork versions 2.x Description: The site title field at "/panel/options/site" allows embedding JS tags, which can be used to attack all members of the system. This is a widespread attack and can cause significant damage if there is a...
WordPress BuddyBoss Platform plugin <= 2.7.70 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title' vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting via 'linktitle' vulnerability discovered by mikemyers in WordPress Plugin Buddyboss Platform versions = 2.7.70...
WordPress plugin Buddyboss Platform 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-8936 · WordPress · Buddyboss Platform
Name of the Vulnerable Software and Affected Versions: The Buddyboss Platform plugin for WordPress versions up to and including 2.7.70 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, specifically via the link title...
CVE-2025-25825
A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Titile in the article category section...
CVE-2025-25825: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Titile in the article category section...
PT-2025-8725
Name of the Vulnerable Software and Affected Versions Emlog Pro version 2.5.4 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Titile in the article category section. Recommendations For Emlog Pro versio...
CVE-2024-13748
The Ultimate Classified Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title parameter in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
Leantime allows Cross-Site Scripting (XSS)
Summary There is a cross-site scripting vulnerability on To-Do that affects a title field of a To-Do...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the title field of a To-Do component. An attacker can inject malicious scripts by submitting crafted input to this field. Details Cross-site scripting or XSS is a code vulnerability that occurs when an...
PT-2025-7645 · To-Do · To-Do
Name of the Vulnerable Software and Affected Versions: To-Do affected versions not specified Description: The issue is related to a cross-site scripting vulnerability that affects the title field of a To-Do. Recommendations: At the moment, there is no information about a newer version that contai...
CVE-2023-51335
PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...
CVE-2023-51325
PHPJabbers Shared Asset Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...
CVE-2023-51318
PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "title, name" parameters...
