Lucene search
K

6 matches found

EUVD
EUVD
added 2025/11/19 3:31 p.m.1 views

EUVD-2025-198159

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities allows Reflected XSS.This issue affects StarCities: before 1.1.61...

5.4CVSS6AI score0.00024EPSS
Exploits0References2
NVD
NVD
added 2025/11/19 2:15 p.m.1 views

CVE-2025-11963

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities allows Reflected XSS. This issue affects StarCities: before 1.1.61...

5.4CVSS0.00024EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/19 2:3 p.m.5 views

CVE-2025-11963 Reflected XSS in Saysis's StarCities

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Saysis Computer Systems Trade Ltd. Co. StarCities allows Reflected XSS. This issue affects StarCities: before 1.1.61...

5.4CVSS0.00024EPSS
Exploits0References2
CVE
CVE
added 2025/11/19 2:3 p.m.7 views

CVE-2025-11963

The CVE-2025-11963 issue is a Reflected XSS in StarCities by Saysis, caused by improper neutralization of input during web page generation. Affected: StarCities prior to version 1.1.61. The Red Hat and other ecosystem records corroborate the same description. The sources do not provide remediatio...

5.4CVSS5.8AI score0.00024EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/19 12:0 a.m.1 views

PT-2025-47457

Name of the Vulnerable Software and Affected Versions StarCities versions prior to 1.1.61 Description StarCities is subject to Reflected Cross-site Scripting XSS, a condition where improper neutralization of input during web page generation allows an attacker to execute malicious scripts in the...

5.4CVSS5.6AI score0.00024EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/07/29 2:32 a.m.2 views

WordPress Master Currency WP plugin <= 1.1.61 - Authenticated (Contributor+) Stored Cross-Site Scripting via Currency Converter Form Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Currency Converter Form Shortcode vulnerability discovered by Artem Polynko Artem Polynko in WordPress Plugin Master Currency WP versions = 1.1.61...

6.4CVSS5.8AI score0.0031EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder