CVE-2026-88262

bizwell xClick (groupware solution) is affected by an insufficient session expiration vulnerability that allows Authentication Bypass . The issue impacts versions R2, R3, and R3.1 . The vulnerability is network-reachable with low complexity and no prior privileges required, though it demands pass...

EUVD-2026-78256

Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass. This issue affects xClick: R2, R3, and R3.1...

CVE-2026-88261

bizwell xClick is affected by an improper input validation vulnerability that allows Stored XSS in versions R2, R3, and R3.1 . The CVSS 4.0 score is 5.1 (MEDIUM) , with a network attack vector, low complexity, low privileges required, and passive user interaction, resulting in low confidentiality...

CVE-2026-88261

Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects xClick: R2, R3, and R3.1...

EUVD-2026-78254

Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects xClick: R2, R3, and R3.1...

EUVD-2012-5148

Malware in sbrugna...

CVE-2012-5225

Cross-site scripting XSS vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the shoppingurl parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the shoppingurl parameter...

CVE-2012-5225

Cross-site scripting XSS vulnerability in webscr.php in xClick Cart 1.0.1 and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the shoppingurl parameter...

CVE-2012-5225

CVE-2012-5225 concerns a cross-site scripting (XSS) vulnerability in the webscr.php component of xClick Cart versions 1.0.1 and 1.0.2. The flaw allows remote attackers to inject arbitrary web script or HTML via the shopping_url parameter. The public sources describe the affected product and vulne...

xClick Cart 1.0.x - 'shopping_url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51699/info xClick Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

xClick Cart 1.0.1 / 1.0.2 Cross Site Scripting

Exploit Title: xClick Cart Cross Site Scripting Date: 27.01.2012 Author: Sony Software Link: http://www.eliteweaver.co.uk/?page=xclick-cart Version: v1.0.1/v1.0.2 Google Dorks: intext:"Powered by: xClick Cart" or webscr.php?itemname= Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com...

xClick Cart 1.0.x - shopping_url Cross-Site Scripting

xClick Cart 1.0.x - shoppingurl Cross-Site Scripting source: https://www.securityfocus.com/bid/51699/info xClick Cart is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...