Search Vulnerabilities

Node-SAML SAML Authentication Bypass

Contao is vulnerable to cross-site scripting in templates

Galette is vulnerable to Cross-site Scripting

bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (HTML)

bagisto - Cross Site Scripting (XSS) in TinyMCE Image Upload (SVG)

bagisto - Cross Site Scripting (XSS) in Create New Customer

Ova Advent <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Shaarli allows reflected XSS via searchtags parameter

Group-Office vulnerable to blind XSS

Hax CMS Stored Cross-Site Scripting vulnerability

Gokapi has stored XSS vulnerability in friendly name for API keys

Gokapi vulnerable to stored XSS via uploading file with malicious file name

GroupOffice's Blind Stored XSS in Phone Number Field Enables Forced Redirect and Unauthorized Actions

Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace]

WordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter

reNgine vulnerable to Stored Cross-Site Scripting (XSS) via DNS Record Poisoning

Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial

Improper Neutralization of Alternate XSS Syntax in iris-web

Improper Neutralization of Alternate XSS Syntax in iris-web

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a...