Lucene search
+L

1050084 matches found

EUVD
EUVD
added 2026/09/13 9:31 p.m.2 views

EUVD-2026-77073

A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the component Query String Rendering. Performing a manipulation of the argument qs results in cross site scripting. The...

5.3CVSS
SaveExploits0References8
EUVD
EUVD
added 2026/09/13 9:31 p.m.3 views

EUVD-2025-210894

Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is disputed because admins are allowed to modify templates, install plugins, and upload other executable content...

1.8CVSS
SaveExploits0References2
CVE
CVE
added 2026/09/13 8:06 p.m.4 views

CVE-2026-88793

The YouTube Embed WordPress plugin (versions 10.0–10.3 ) contains an unauthenticated stored XSS vulnerability in its youram_server AJAX action. The action performs no proper authorization check, relying solely on a nonce that is printed on every front-end page, and does not escape stored data bef...

8.8CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/13 8:06 p.m.5 views

CVE-2026-85129

CVE-2026-85129 affects the Hoo Companion WordPress plugin version 1.0.2 . The vulnerability resides in the plugin's theme settings import feature , which lacks any authorisation or validation checks and fails to sanitise submitted data before storing it as the active theme's settings. This allows...

8.8CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/13 8:06 p.m.3 views

CVE-2026-74933

The GenieWords WordPress plugin, versions 1.5.27 through 1.5.34 , is affected by missing authorization checks on several of its REST API and AJAX actions. Because the plugin decodes stored values before outputting them, an unauthenticated attacker can overwrite the plugin's configuration and inje...

8.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 6:38 p.m.9 views

CVE-2023-43344-Quick-CMS-Stored-XSS---SEO-Meta-description

Quick CMS Stored XSS v6.7 Author: Sergio Description: A Cross-Site Scripting XSS vulnerabiliti in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the SEO - Meta description in the Pages Menu. Attack Vectors: Scripting A vulnerability in the...

5.4CVSS6.1AI score0.00644EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 6:24 p.m.4 views

CVE-2024-34582

CVE-2024-34582 Affects the latest versions of Mozilla & Chrome Web Browsers, Sunhillo Rici5k & Sureline The most current versions of the Web Servers running on the Sunhillo devices are susceptible to Reflected XSS. The vulnerability lies within the useridchange parameter within /cgi/usrPasswd.cgi...

6.1CVSS5.8AI score0.00398EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 6:07 p.m.10 views

CVE-2023-29839

CVE-2023-29839 Hotel Druid 3.0.4 Stored Cross Site Scripting Vulnerability CMS Link: https://www.hoteldruid.com/ Version Affected: 3.0.4 Severity & CVSS: 5.4 Medium | Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N A Stored Cross Site Scripting XSS vulnerability exists in multiple pages in...

5.4CVSS6AI score0.00663EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 6:06 p.m.4 views

CVE-2023-44767_RiteCMS-File-Upload--XSS---Filemanager

RiteCMS 3.0 File Upload - XSS Author: Sergio Description: File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a svg file with XSS content. Attack Vectors: AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L POC: We create an svg file with the following content: root@kitploit: When logging...

4.8CVSS5.8AI score0.00455EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/13 6:01 p.m.6 views

CVE-2020-18325

Multilple Cross Site Scripting XSS vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel. Description Subrion CMS is easy to install and simple to manage. Use it as a stand-alone application or in conjunction with other applications to create entry level sites, mid-siz...

6.1CVSS6.5AI score0.01644EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 6:00 p.m.7 views

CVE-2024-25175

CVE-2024-25175 Reflected XSS via HTTP Response Splitting Description : Exploitation of this vulnerability can lead to the execution of JavaScript code in the victim's browser Cross-Site Scripting when following a specially crafted link. The vulnerability arises because The web server does not...

6.1CVSS6AI score0.0045EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 5:59 p.m.5 views

XSS-Payloads

This repository does not have a README...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:55 p.m.8 views

CVE-2023-43339-CMSmadesimple-Reflected-XSS---Installation

Cmsmadesimple CMS Reflected XSS v2.2.18 Author: Sergio Description: Multiple Cross-Site Scripting XSS vulnerabilities in installation of cmsmadesimple v.2.2.18 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the Database Name, DataBase User or Database...

6.1CVSS6.9AI score0.00645EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:55 p.m.8 views

CVE-2023-31664

CVE-2023-31664 CVE-2023-31664 A reflected cross-site scripting XSS vulnerability in /authenticationendpoint/login.do of WSO2 Api Manager below v4.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tenantDomain parameter. PoC: to exploit it only...

6.1CVSS6.8AI score0.012EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:42 p.m.6 views

https-nj.gov---CVE-2018-14040

https-nj.gov---CVE-2018-14040 Vulnearability Report of the New Jersey official site In Bootstrap prior to 4.1.2, XSS is possible in the main collapse data attribute. The data-target attribute and the data-parent attribute is vulnerable to Cross-Site Scripting attacks. Test RECOMMENDATION The fix...

6.1CVSS7AI score0.04135EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:41 p.m.7 views

CVE-2022-43097

CVE-2022-43097 All details about CVE-2022-43097 Software: Phpgurukul User Registration & User Management System v3.0 Software Link: https://phpgurukul.com/user-registration-login-and-user-management-system-with-admin-panel/ Description: Phpgurukul User Registration & User Management System v3.0 w...

5.4CVSS6AI score0.00546EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:36 p.m.4 views

MpOperationLogs

CVE-2023-5538 wordpress plugin MpOperationLogs = 1.0.1 - Unauthenticated Stored Cross-Site Scripting...

7.2CVSS7AI score0.00985EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:35 p.m.6 views

CVE-2023-49973

CVE-2023-49973 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "email" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious actor ca...

6.1CVSS6AI score0.0045EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:35 p.m.13 views

audit-xss-cve-2020-7934

CVE 2020-7934 How to run CVE Requirements 1. docker Remarks it's possible put the script attack online given the js code http://yourjavascript.com/ Our Js script online for the attack html Commands for configuration 1. go to root folder of this project 2. run "sudo docker-compose up --build" 3. n...

5.4CVSS6AI score0.04457EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 5:30 p.m.4 views

CVE-2024-41502

CVE-2024-41502 CVE: CVE-2024-41502 Software: Jetimob Plataforma Imobiliaria CRM/ERP/CMS Version: 20240627-0 Vulnerability: Stored Cross-Site Scripting XSS Description: Stored XSS via the form field "Observações" in the "Pessoas" section when creating or editing either a legal or a natural person...

6.1CVSS5.9AI score0.00257EPSS
SaveExploits2
Rows per page
Query Builder