CVE-2026-17586

The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'vkExUnitctaimgposition' Post Meta in all versions up to, and including, 9.118.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2026-67103

HCL BigFix Service Management is affected by Cross-Site Scripting XSS vulnerability, which could allow an attacker to inject unsanitized malicious scripts that execute in a victim's browser, enabling session hijacking, account takeover, and unauthorized actions on behalf of affected users...

CVE-2026-15004

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 6.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-14472

The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kubio/copyright Block Content in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-11757

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in KA Informatics Technologies Ltd. Co. Bar Association Website allows Reflected XSS. This issue affects Bar Association Website: through 18092026. NOTE: The vendor was contacted early about this...

CVE-2024-48246

CVE-2024-48246 Vehicle Management System 1.0 - Cross-Site Scripting stocké XSS Description Vehicle Management System 1.0 contient une vulnérabilité de Cross-Site Scripting stocké XSS dans le paramètre Name de /vehicle-management/booking.php. Un acteur malveillant peut injecter des payloads...

Mybb-XSS_SQL_RCE-POC

Mybb-XSSSQLRCEPOC Mybb associe CVE-2021-27890 & CVE-2021-27889 au POC RCE Avant utilisation : Il y a deux fichiers ici : 1.js et attacklisten.py Vous devez modifier ces deux fichiers : 1.js : modifiez l'URL du forum Mybb et l'URL d'attaque : root@kitploit: var bashurl =...

WebPort-v1.19.1-Reflected-XSS

WebPort-v1.19.1-XSS-réfléchi XSS réfléchi dans WebPort-v1.19.1 affecte les utilisateurs qui ouvrent un lien malveillant ou une page web tierce. CVE-2019-12460 https://vulners.com/cve/CVE-2019-12460 PoC-1 Pour exploiter la vulnérabilité, quelqu'un pourrait utiliser la requête...

EUVD-2026-82771

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in KA Informatics Technologies Ltd. Co. Bar Association Website allows Reflected XSS. This issue affects Bar Association Website: through 18092026. NOTE: The vendor was contacted early about this...

CVE-2026-11757

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the KA Informatics Technologies Ltd. Co. Bar Association Website , caused by improper neutralization of input during web page generation. The affected version range extends through 18/09/2026 . The CVSS 3.1 score is 6.1 (MEDIUM) , wit...

CVE-2026-11757 Reflected XSS in KA Informatics' Bar Association Website

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in KA Informatics Technologies Ltd. Co. Bar Association Website allows Reflected XSS. This issue affects Bar Association Website: through 18092026. NOTE: The vendor was contacted early about this...

CVE-2023-31705

CVE-2023-31705 описание Отражённая межсайтовая скриптовая XSS уязвимость в Sourcecodester Task Reminder System 1.0 позволяет аутентифицированному пользователю внедрить вредоносный JavaScript в параметр page. Тип уязвимости Межсайтовый скриптинг XSS Поставщик продукта Sourcecodster База кода...

CVE-2023-29489

Introduction Une vulnérabilité de cross-site scripting XSS reflété exploitable a été découverte dans certaines versions de cPanel et a été identifiée comme CVE-2023-29489. Cette vulnérabilité permet aux attaquants d'exécuter du code JavaScript arbitraire sans nécessiter d'authentification. La...

CVE-2026-67103 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by Cross-Site Scripting XSS vulnerability, which could allow an attacker to inject unsanitized malicious scripts that execute in a victim's browser, enabling session hijacking, account takeover, and unauthorized actions on behalf of affected users...

CVE-2026-67103

HCL BigFix Service Management is affected by a Cross-Site Scripting (XSS) vulnerability that allows an attacker to inject unsanitized malicious scripts executed in a victim's browser. The stated impact includes session hijacking , account takeover , and unauthorized actions on behalf of affected ...

EUVD-2026-82769

HCL BigFix Service Management is affected by Cross-Site Scripting XSS vulnerability, which could allow an attacker to inject unsanitized malicious scripts that execute in a victim's browser, enabling session hijacking, account takeover, and unauthorized actions on behalf of affected users...

CVE-2025-11262-Lab

CVE-2025-11262 - XSS aveugle stocké non authentifié dans Link Whisper Free Résumé exécutif Ce dépôt contient un laboratoire Docker local pour reproduire CVE-2025-11262 , un problème de cross-site scripting stocké non authentifié affectant l'extension WordPress Link Whisper Free. Le laboratoire...

CVE-2026-47423-dompurify-xss-detector

DOMPurify . Au lieu de se fier aux commentaires source facilement supprimés ou aux variables de version, cet outil effectue une empreinte logique sur les bundles JavaScript minifiés de production pour identifier les configurations de balises autorisées non corrigées. Résumé de la vulnérabilité Da...

Teldat-Router-CVE-2022-POC

Teldat Router CVE-2022-39996 & CVE-2022-39997 POC Preuve de concept pour deux vulnérabilités découvertes dans les routeurs Teldat RS123 / RS123w. Aperçu CVE ID| Type| CWE| CVSS| Sévérité ---|---|---|---|--- CVE-2022-39996| XSS réfléchi| CWE-79| 6.1| Moyen CVE-2022-39997| Mot de passe faible|...

CVE-2025-51401

Titre de l'exploit : LiveHelperChat =4.61 - Cross-Site Scripting stocké XSS via le champ Nom de l'opérateur de chat déclenché lors du transfert du propriétaire du chat Date : 09/06/2025 Auteur de l'exploit : Manojkumar J TheWhiteEvil Linkedin : https://www.linkedin.com/in/manojkumar-j-7ba35b202/...