1047330 matches found
CVE-2023-50072
CVE-2023-50072 توجد ثغرة تخزينية للبرمجة النصية عبر المواقع XSS في إصدار OpenKM 7.1.40 dbb6e88 مع الإضافة الاحترافية، تسمح لمستخدم مُوثَّق برفع ملاحظة على ملف تعمل كحمولة XSS مخزنة. أي مستخدم يفتح ملاحظة ملف مستند سيؤدي إلى تشغيل XSS. المعامل المُعرَّض للخطر: text الاستغلال - إثبات المفهوم POC عك...
CVE-2025-60654
CVE-2025-60654 - Cross-Site Scripting XSS stocké dans la description de l'annonce | ---|--- Chercheurs| DotAdrien Sévérité| 7.2 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Logiciel| Script Pag...
XSStrike
XSStrike حزمة كشف XSS المتقدمة ويكي XSStrike • الاستخدام • الأسئلة الشائعة • للمطورين • التوافق • المعرض XSStrike هي حزمة كشف لـ Cross Site Scripting مزودة بأربعة محللين مكتوبين يدويًا، ومولد حمولات ذكي، ومحرك اختبار تخميني قوي، وزاحف سريع بشكل لا يصدق. بدلاً من حقن الحمولات والتحقق من عملها كما...
CVE-2025-60656
CVE-2025-60656 - Хранимая межсайтовая сценарная атака XSS на главной странице | ---|--- Исследователи| DotAdrien Критичность| 8.5 ВЫСОКАЯ CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N Программное обеспечение...
CVE-2026-78563
The NotificationX Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 3.1.4 , caused by insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which execute whenev...
CVE-2026-78563 NotificationX Pro <= 3.1.4 - Unauthenticated Stored Cross-Site Scripting
The NotificationX Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...
EUVD-2026-65323
The NotificationX Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...
CVE-2026-66882
Improper Neutralization of Input During Web Page Generation XSS vulnerability in team-alembic AshAuthentication allows reflected cross-site scripting via the confirmation and magic link interaction forms. When a strategy is configured with requireinteraction? set to true, AshAuthentication serves...
CVE-2026-18328
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via the 'errordescription' parameter in all versions up to, and including, 1.57.0 due to insufficient input sanitization and output escaping. This...
CVE-2026-18512
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Approved Comment Body Rendered in Translation Editor Strings Dropdown in all versions up to, and including, 3.2.6 due to insufficient input sanitization and...
CVE-2026-18323
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Radio Field Save and Continue Draft in all versions up to, and including, 1.57.0.2 due to insufficient input sanitization and output escaping. This makes i...
CVE-2026-18100
The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'mfformid' Widget Setting in all versions up to, and including, 4.1.8 due to insufficient input sanitization and output escaping. This makes it...
femida
فيميدا-إكس إس إس قيد التطوير إضافة آلية للبحث عن ثغرات إكس إس إس الأعمى Blind XSS مخصصة لـ Burp Suite. التثبيت Git clone https://github.com/wish-i-was/femida.git Burp - Extender - Add - ابحث عن blind-xss.py واختره كيفية الاستخدام الإعدادات أولاً وقبل كل شيء، تحتاج إلى تعيين رابط الاستدعاء callbac...
femida
Femida-xss WIP An automated blind-xss search plugin for Burp Suite. Installation Git clone https://github.com/wish-i-was/femida.git Burp - Extender - Add - find and select blind-xss.py How to use Settings First of all you need to setup your callback URL in field called "Your url" and press Enter ...
CVE-2026-66882 Reflected XSS in AshAuthentication confirmation and magic link interaction forms
Improper Neutralization of Input During Web Page Generation XSS vulnerability in team-alembic AshAuthentication allows reflected cross-site scripting via the confirmation and magic link interaction forms. When a strategy is configured with requireinteraction? set to true, AshAuthentication serves...
CVE-2026-66882
AshAuthentication (team-alembic) is affected by a reflected cross-site scripting vulnerability in its confirmation and magic link interaction forms. When require_interaction? is true, the templates confirmation_form.html.eex and sign_in_form.html.eex interpolate request parameters into hidden inp...
EUVD-2026-65321
Improper Neutralization of Input During Web Page Generation XSS vulnerability in team-alembic AshAuthentication allows reflected cross-site scripting via the confirmation and magic link interaction forms. When a strategy is configured with requireinteraction? set to true, AshAuthentication serves...
essential-addons-for-elementor-xss-poc
🔍 Détecteur de vulnérabilité XSS pour Essential Addons for Elementor 🚨 Informations critiques Cet outil est destiné uniquement à la recherche en sécurité et à des fins de correction. Ne l'utilisez pas pour nuire aux sites. Si vous trouvez des sites vulnérables, signalez-les de manière responsable...
CVE-2016-15041-mainwp-dashboard
CVE-2016-15041 Lab - XSS stocké dans MainWP Dashboard Lab vulnérable pour CVE-2016-15041 : XSS stocké sans authentification dans le plugin WordPress MainWP Dashboard = 3.1.2. Démarrage rapide root@kitploit: docker compose up -d --build Attendez 30 secondes pour la configuration automatique. Le la...