Search Vulnerabilities

Stored Cross-Site Scripting (XSS) in TastyIgniter Media Manager

Joomla Extension - phoca.cz - Reflected XSS vulnerability in Phoca Maps 5.0.0-6.1.1

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component

NoteGen chat preview XSS via unsanitized AI/skill HTML rendering

Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Site Scripting via Post Slug (post_name)

Milkdown < 7.21.3 DOM XSS via innerHTML Assignment

Milkdown < 7.21.3 Stored XSS via javascript: URL in link href

Reflected XSS Polen Media's Website Template

Loytec LWEB802: Reflected Cross-Site Scripting in LWEB802

Loytec LINX firmware: Unauthenticated stored XSS in OPC XML-DA server

DOMPurify before 3.4.12 Hook Bypass via CUSTOM_ELEMENT_HANDLING

Cross-Site Scripting (XSS) in Looker allows Admin Account Takeover

VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parameter

VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' Parameter

Rich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attribute

SureDash <= 1.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

WP Hotel Booking <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'widget_search' Shortcode Attribute

Visualizer <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'backend-title' Parameter

Brands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute

Cozy Blocks <= 2.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon.view' Block Attribute