Search Vulnerabilities

DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload

Elementor Website Builder <= 3.35.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via REST API

Stored XSS through system messages in WikiLove

ChurchCRM has Stored XSS in PersonView.php via Facebook Field Attribute Injection

DOM-Based XSS in Homarr /auth/login Redirect

YesWiki has Persistant Blind XSS at "/?BazaR&vue=consulter"

DOM-Based XSS in Ory Polis Login Page

Chamilo: Reflected XSS via page parameter

Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster

Node-SAML SAML Authentication Bypass

Contao is vulnerable to cross-site scripting in templates

Galette is vulnerable to Cross-site Scripting

bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (HTML)

bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (SVG)

bagisto - Cross Site Scripting (XSS) in Create New Customer

Ova Advent <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Shaarli allows reflected XSS via searchtags parameter

Group-Office vulnerable to blind XSS

Hax CMS Stored Cross-Site Scripting vulnerability

Gokapi has stored XSS vulnerability in friendly name for API keys