CVE-2024-7313

Exploit della vulnerabilità del plugin Shield Security CVE-2024-7313 Panoramica Questo repository contiene uno script PoC in Python progettato per sfruttare una vulnerabilità di XSS riflesso nel plugin Shield Security per WordPress, che interessa le versioni precedenti alla 20.0.6. La vulnerabili...

CVE-2023-7173

CVE-2023-7173: Stored Cross-Site Scripting XSS im Krankenhausverwaltungssystem Details zur Schwachstelle CVE-ID: CVE-2023-7173 Schwachstellentyp: Stored XSS Betroffene Komponente: Benutzer-Login-Seite Verwundbarer Parameter: Fullname Herstellerdetails: phpgurukul.com Verwundbare Version: Hospital...

CVE-2020-9758

CVE-2020-9758 Beschreibung Ein Problem wurde in chat.php von LiveZilla Live Chat 8.0.1.3 Helpdesk entdeckt. Eine blinde JavaScript-Injektion liegt im Parameter name vor. Das Auslösen kann die Benutzernamen und Passwörter der Helpdesk-Mitarbeiter in der URI abrufen. Dies führt zu einer...

CVE-2026-78293 WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...

CVE-2026-78293

CVE-2026-78293 affects the WordPress plugin WP w3all phpBB (versions ≤ 3.0.6 ), where an unauthenticated Cross Site Scripting (XSS) vulnerability was identified. The issue was discovered by lanlv – HPT Vietnam Corporation and reported via Patchstack. The CVSS 3.1 score is 7.1 (HIGH) with vector A...

EUVD-2026-66941

Unauthenticated Cross Site Scripting XSS in Music Player for WooCommerce = 1.8.9 versions...

CVE-2026-78281 WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...

CVE-2026-78281

The WordPress plugin CP Media Player (versions

CVE-2026-78261 WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...

CVE-2026-78261

CVE-2026-78261 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the Realtyna Organic IDX WordPress plugin , affecting versions

CVE-2023-2822-demo

CVE-2023-2822-demo Semplice applicazione Flask per implementare una web app intenzionalmente vulnerabile per dimostrare la CVE-2023-2822. Basata sul writeup su https://medium.com/@cyberninja717/reflected-cross-site-scripting-vulnerability-in-ellucian-ethos-identity-cas-logout-page-685bb1675dfb...

CVE-2019-16172

CVE-2019-16172 Der CVE-2019-16172-Scanner wurde entwickelt, um LimeSurvey-Instanzen auf die gespeicherte XSS-Schwachstelle zu überprüfen. CVE-Beschreibungen CVE-2019-16172 Beschreibung: CVE-2019-16172 ist eine gespeicherte XSS-Schwachstelle, die in LimeSurvey-Versionen vor 3.17 gefunden wurde. Di...

CVE-2023-34830---Reflected-XSS-found-in-I-doit-Open-v24-and-below

CVE-2023-34830 - XSS Refletido encontrado no i-doit Open v24 e anteriores i-doit Open v24 e anteriores são vulneráveis a XSS Refletido. Essas vulnerabilidades podem permitir que invasores autenticados remotos injetem scripts web arbitrários ou HTML. Descrição do produto : i-doit é uma documentaçã...

CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS

CVE-2021-27190 – PEEL Shopping, E-Commerce-Warenkorb – Stored Cross-Site-Scripting-Schwachstelle in 'Address' Datum 2021-02-11 Exploit-Autor Anmol K Sachan Hersteller-Homepage https://www.peel.fr/ Software-Link https://www.peel.fr/nos-offres-1/peel-shopping-31.html...

CVE-2022-40348_Intern-Record-System-Cross-site-Scripting-V1.0-Vulnerability-Unauthenticated

CVE-2022-40348: Intern Record System - Cross-site Scripting XSS non autenticato nei parametri 'name' e 'email' Titolo Exploit: Intern Record System - Cross-site Scripting XSS non autenticato nei parametri 'name' e 'email' Data: 2022-06-09 Autore Exploit: Hamdi Sevben Homepage del fornitore:...

CVE-2026-29598

CVE-2026-29598: Cross-Site Scripting XSS persistente in cm3 Acora CMS versione 10.7.1. DDSN Interactive cm3 Acora CMS versione 10.7.1 contiene una vulnerabilità di Cross-Site Scripting XSS persistente nella funzionalità di gestione degli utenti. Un amministratore con la possibilità di aggiungere ...

iVANTI-CVE-2021-38560

iVANTI-CVE-2021-38560 Ivanti Service Manager 2021.1 infetto da XSS riflesso tramite il parametro appName associato a chiamate ConfigDB, come in RelocateAttachments.aspx. Tipo di vulnerabilità: Cross Site Scripting XSS Produttore del prodotto: IVANTI Versioni del prodotto interessate: Service...

CVE-2021-46005

CVE-2021-46005 CVE-2021-46005 के बारे में सभी विवरण सॉफ्टवेयर: ऑनलाइन कार रेंटल सिस्टम 1.0 सॉफ्टवेयर लिंक: https://www.sourcecodester.com/cc/14145/online-car-rental-system-using-phpmysql.html भेद्यता प्रकार: संग्रहीत क्रॉस-साइट स्क्रिप्टिंग प्रभावित घटक: post-avehical पेज में vehicalorcview प्रभा...

CVE-2022-1597

CVE-2022-1597 Il plugin, utilizzato come companion per i temi Discy e Himer, non sanifica e non esegue l'escape di un parametro nel suo modulo di reimpostazione della password, rendendo possibile eseguire attacchi di Cross-Site Scripting Riflesso Plugin interessati: WPQA history.pushState'', '',...

Pi-hole-XSS-CVE-2025-53533

Exploração de Cross-Site-Scripting XSS no Pi-hole - CVE-2025-53533 PoC Prova de conceito de exploração para XSS refletido não autenticado na Interface Web do Pi-hole v6.2.1. Corrigido na v6.3. Início Rápido root@kitploit: git clone https://github.com/moezbouzayani9/Pi-hole-XSS-CVE-2025-53533.git ...