stored xss - Robuta Search

https://www.sentinelone.com/vulnerability-database/cve-2026-87928/ CVE-2026-87928: MaxSite CMS Stored XSS Vulnerability Sep 9, 2026 - CVE-2026-87928 is a stored XSS vulnerability in MaxSite CMS. Learn about its impact, affected versions, and mitigation methods. stored xss cve cms vulnerability https://www.miggo.io/vulnerability-database/cve/CVE-2026-16649 CVE-2026-16649: Gravity Forms Unauth Stored XSS | Miggo Gravity Forms unauthenticated Stored XSS via Post Body Field injects malicious scripts using an onerror event in a tooltip's aria-label re-parsed as innerHTML. gravity forms stored xss cve miggo https://www.sentinelone.com/vulnerability-database/cve-2025-24562/ CVE-2025-24562: KBucket CSRF & Stored XSS Vulnerability Apr 15, 2026 - CVE-2025-24562 is a CSRF vulnerability in Optimal Access KBucket that enables stored XSS. Learn about its impact, affected versions, and mitigation methods. stored xss cve csrf vulnerability https://advisories.gitlab.com/npm/parse-server/CVE-2026-55778/ parse-server: Stored XSS via non-standard file extension bypassing file upload extension blocklist... CVE-2026-55778 parse-server: Stored XSS via non-standard file extension bypassing file upload extension blocklist: Parse Server's default... stored xss non standard file extension parse server https://www.sentinelone.com/vulnerability-database/cve-2026-82396/ CVE-2026-82396: Sulu CMS Stored XSS Vulnerability Sep 1, 2026 - CVE-2026-82396 is a stored cross-site scripting vulnerability in Sulu CMS. Learn about its impact, affected versions, and mitigation methods. stored xss cve sulu cms vulnerability https://www.sonarsource.com/blog/mybb-stored-xss-to-rce/ MyBB = 1.8.20: From Stored XSS to RCE | Sonar This blog post shows how an attacker can take over any board hosted with MyBB prior to version 1.8.21 by sending a malicious private message to an... stored xss mybb rce sonar Sponsored https://ctwmsg.com/?siteId=jasmin&cobrandId=&superCategoryName=&categoryName=fetish&pageName=listpage&prm[psid]=robuta&prm[pstool]=211_18&prm[psprogram]=revs&prm[campaign_id]=&subAffId= Live Sex Cams and Adult Chat with Webcam Girls | LiveJasmin Chat for free on LiveJasmin and watch HD Live Sex cam shows! 2000+ Models are waiting for You, no registration required. https://www.immunitysec.com/vulnerabilities/cve-2024-11182/ CVE-2024-11182: Stored XSS vulnerability in MDaemon Email Server Oct 21, 2025 - CVE-2024-11182: An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript… stored xss email server cve vulnerability mdaemon https://www.sentinelone.com/vulnerability-database/cve-2025-31890/ CVE-2025-31890: Simple Map No Api Stored XSS Vulnerability Jun 17, 2026 - CVE-2025-31890 is a stored cross-site scripting vulnerability in Simple Map No Api plugin. Learn about its impact, affected versions, and mitigation methods. stored xss cve simple map api https://advisories.gitlab.com/composer/mantisbt/mantisbt/CVE-2026-44655/ MantisBT has Stored XSS on Move Attachments Admin Page | GitLab Advisory Database (GLAD) CVE-2026-44655 MantisBT has Stored XSS on Move Attachments Admin Page: Unescaped Project Name allows an attacker that can set it (which typically requires... stored xss admin page mantisbt move attachments https://turingpoint.de/en/advisories/tp-2026-018/ Lemmy: Stored XSS (CVE-2026-54743) | turingpoint CVE-2026-54743 (TP-2026-018): Stored XSS via Markdown image alt-text in Lemmy — injected JavaScript executes in the browsers of other community members. stored xss lemmy cve https://www.miggo.io/vulnerability-database/cve/CVE-2026-76858 CVE-2026-76858: Netcore NR255 DDNS Stored XSS | Miggo Netcore NR255-V stored XSS in ddns_wan_list_show.cgi executes persistent script in admin context via DDNS configuration injection and unsafe eval() handling. stored xss cve netcore ddns miggo https://basefortify.eu/cve_reports/2026/10/cve-2026-88782.html CVE-2026-88782 | Stored XSS in Kubio AI Page Builder WordPress Plugin Oct 6, 2026 - The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target,... ai page builder stored xss wordpress plugin cve kubio https://www.thesmartscanner.com/vulnerability-list/dbgate-web-stored-xss-in-applicationicon-leads-to-potential-rce-in-electron-due-to-unsafe-renderer-configuration dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer... A stored XSS vulnerability exists in DbGate because attacker-controlled SVG icon strings are rendered as raw HTML without sanitization. stored xss web leads potential rce https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/authorize-project/CVE-2024-52552/ Stored XSS vulnerability in Jenkins Authorize Project Plugin | GitLab Advisory Database (GLAD) CVE-2024-52552 Stored XSS vulnerability in Jenkins Authorize Project Plugin : Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing... stored xss vulnerability jenkins authorize project https://cve.halosecurity.com/cve-advisory/cve-2026-44727-jupyter-server-stored-xss-leading-to-kernel-rce CVE-2026-44727: Jupyter Server Stored XSS leading to Kernel RCE Aug 28, 2026 - CVE-2026-44727 affects Jupyter Server with stored XSS in nbconvert HTTP handlers. This can lead to kernel RCE. Review severity, exposure, and remediation... stored xss cve jupyter server leading https://threat-modeling.com/pgadmin-4-critical-vulnerabilities-june-2026/ pgAdmin 4 Security Advisory: Multiple Critical Vulnerabilities Including Stored XSS (9.3), SQL... Jun 20, 2026 - Overview pgAdmin 4, the most widely used open-source administration and development platform for PostgreSQL, has disclosed multiple critical vulnerabilities in... security advisory stored xss pgadmin multiple critical https://flatt.tech/cve/CVE-2023-49598/ CVE-2023-49598 | Stored XSS in GROWI's event handlers | GMO Flatt Security stored xss event handlers cve growi gmo https://casky.ai/cve/CVE-2026-96871 CVE-2026-96871: WordPress Mang Board Plugin Stored XSS via Data Type Parameter — Casky — Casky Casky's Claude AI skills cover the attack patterns behind CVE-2026-96871 (CVSS 7.2). See which skills detect this vulnerability. stored xss data type cve wordpress mang https://basefortify.eu/cve_reports/2026/10/cve-2026-96256.html CVE-2026-96256 | Stored XSS in Gutenberg Essential Blocks WordPress Plugin stored xss wordpress plugin cve gutenberg essential https://codeant.ai/vulnerability-database/cve-2026-90943 Stored XSS (CWE-79) in Filament Comments Extension CVE-2026-90943 affects parallax filament-comments through 3.0.0 with XSS, letting authenticated users run scripts in viewers' browsers and steal sessions. stored xss cwe filament comments extension https://basefortify.eu/cve_reports/2026/10/cve-2026-92977.html CVE-2026-92977 | Stored XSS in Real Cookie Banner WordPress Plugin real cookie banner stored xss wordpress plugin cve https://www.sentinelone.com/vulnerability-database/cve-2025-48315/ CVE-2025-48315: WordPress HTML Plugin Stored XSS Vulnerability Jun 17, 2026 - CVE-2025-48315 is a stored cross-site scripting vulnerability in WordPress HTML custom-html-bodyhead plugin. Learn about its impact, affected versions, and... stored xss cve wordpress html plugin https://www.sentinelone.com/vulnerability-database/cve-2026-86491/ CVE-2026-86491: JetBrains YouTrack Stored XSS Vulnerability Sep 8, 2026 - CVE-2026-86491 is a stored XSS vulnerability in JetBrains YouTrack. Learn about its impact, affected versions, and mitigation methods. stored xss cve jetbrains youtrack vulnerability https://www.sentinelone.com/vulnerability-database/cve-2025-48131/ CVE-2025-48131: UltraAddons Elementor Lite Stored XSS Vulnerability Jun 17, 2026 - CVE-2025-48131 is a stored cross-site scripting vulnerability in UltraAddons Elementor Lite. Learn about its impact, affected versions, and mitigation methods. stored xss cve elementor lite vulnerability https://casky.ai/cve/CVE-2026-89193 CVE-2026-89193: Unescaped HTML Parser Output Enables Stored XSS in WordPress — Casky — Casky Casky's Claude AI skills cover the attack patterns behind CVE-2026-89193 (CVSS 7.5). See which skills detect this vulnerability. html parser stored xss cve unescaped output https://advisories.gitlab.com/composer/getgrav/grav/CVE-2025-66843/ Grav is vulnerable to Stored XSS through authenticated user-edited content | GitLab Advisory... CVE-2025-66843 Grav is vulnerable to Stored XSS through authenticated user-edited content: grav before v1.7.49.5 has a Stored Cross-Site Scripting (Stored XSS)... stored xss authenticated user grav vulnerable edited https://www.sentinelone.com/vulnerability-database/cve-2025-39555/ CVE-2025-39555: Church Admin Plugin Stored XSS Vulnerability Jun 17, 2026 - CVE-2025-39555 is a stored cross-site scripting vulnerability in Church Admin plugin. Learn about its impact, affected versions, and mitigation methods. admin plugin stored xss cve church vulnerability https://www.sentinelone.com/vulnerability-database/cve-2025-57932/ CVE-2025-57932: PowerFolio Stored XSS Vulnerability Jun 17, 2026 - CVE-2025-57932 is a stored cross-site scripting vulnerability in PowerFolio plugin. Learn about its impact, affected versions, and mitigation methods. stored xss cve vulnerability https://blog.cleantalk.org/cve-2023-4646-simple-posts-ticker-1-1-6-contributor-stored-xss/ CVE-2023-4646 - Simple Posts Ticker 1.1.6 - Contributor + Stored XSS via shortcode – CleanTalk's... May 7, 2026 - Read our article – While examining the plugin during the testing phase, we uncovered a vulnerability that enables the execution of Stored Cross-Site Scripting... stored xss cve simple posts ticker https://securityelites.com/glossary/stored-xss/ Stored XSS â€” Cybersecurity Glossary | SecurityElites Apr 17, 2026 - A type of XSS where the malicious script is permanently stored on the target server and executed whenever a user loads the affected page. stored xss cybersecurity glossary https://www.sentinelone.com/vulnerability-database/cve-2025-48249/ CVE-2025-48249: WooCommerce EAN Plugin Stored XSS Flaw Jun 17, 2026 - CVE-2025-48249 is a stored cross-site scripting vulnerability in WPFactory EAN for WooCommerce plugin. Learn about its impact, affected versions, and... stored xss cve woocommerce ean plugin https://www.sentinelone.com/vulnerability-database/cve-2025-53454/ CVE-2025-53454: Ultimate WP Mail Stored XSS Vulnerability Jun 17, 2026 - CVE-2025-53454 is a stored cross-site scripting vulnerability in Ultimate WP Mail plugin. Learn about its impact, affected versions, and mitigation methods. stored xss cve ultimate mail vulnerability Sponsored https://www.sexygamerz.com/enter.php?prg=1&id=robuta&t=best&ad_id=sexygamerz_315x300_default2.jpg Sexy Gamerz - World's Best Gamer Dating Tired of playing alone? Find a hot gamer girl on Sexy Gamerz. https://advisories.gitlab.com/composer/redaxo/source/CVE-2026-63002/ REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames | GitLab Advisory... CVE-2026-63002 REDAXO: Stored XSS in Mediapool Sync Page via Unescaped Filesystem Filenames: The mediapool sync page (sync.php) renders filenames from the... stored xss sync via unescaped filesystem https://www.sentinelone.com/vulnerability-database/cve-2025-31470/ CVE-2025-31470: Page Takeover Plugin Stored XSS Vulnerability Jun 17, 2026 - CVE-2025-31470 is a stored cross-site scripting vulnerability in Page Takeover plugin. Learn about its impact, affected versions, and mitigation methods. stored xss cve takeover plugin vulnerability https://casky.ai/cve/CVE-2026-92244 CVE-2026-92244: Stored XSS in WooCommerce PDF Invoice Plugin Billing Fields — Casky — Casky Casky's Claude AI skills cover the attack patterns behind CVE-2026-92244 (CVSS 7.2). See which skills detect this vulnerability. stored xss pdf invoice cve woocommerce plugin https://casky.ai/cve/CVE-2026-81807 CVE-2026-81807: Unescaped Chat Messages Enable Stored XSS in WordPress Plugin — Casky — Casky Casky's Claude AI skills cover the attack patterns behind CVE-2026-81807 (CVSS 8.8). See which skills detect this vulnerability. stored xss wordpress plugin cve unescaped chat https://www.sentinelone.com/vulnerability-database/cve-2025-26923/ CVE-2025-26923: Event Post Plugin Stored XSS Vulnerability Jun 17, 2026 - CVE-2025-26923 is a stored cross-site scripting vulnerability in Event Post plugin versions up to 5.9.8. Learn about its impact, affected versions, and... event post stored xss cve plugin vulnerability https://basefortify.eu/cve_reports/2026/10/cve-2026-102772.html CVE-2026-102772 | Stored XSS in CMB2 WordPress Plugin stored xss wordpress plugin cve https://www.sentinelone.com/vulnerability-database/cve-2025-26747/ CVE-2025-26747: RainbowNews Stored XSS Vulnerability Jun 17, 2026 - CVE-2025-26747 is a stored cross-site scripting vulnerability in RainbowNews. Learn about its impact, affected versions, and mitigation methods. stored xss cve vulnerability https://www.fused.com/wordpress-vulnerabilities/plugins/gd-rating-system/cve-2026-93430/ CVE-2026-93430: GD Rating System: Stored XSS through rating AJAX render arguments ° Fused.com The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX in all… rating system stored xss cve ajax render https://casky.ai/cve/CVE-2026-96752 CVE-2026-96752: WordPress Zero Spam Plugin Stored XSS via Contact Form 7 — Casky — Casky Casky's Claude AI skills cover the attack patterns behind CVE-2026-96752 (CVSS 7.2). See which skills detect this vulnerability. stored xss contact form cve wordpress zero https://basefortify.eu/cve_reports/2026/10/cve-2025-12828.html CVE-2025-12828 | Stored XSS in Ultra Addons Lite for Elementor WordPress Plugin Oct 6, 2026 - The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out widget in all versions up to, and... stored xss wordpress plugin cve ultra addons https://advisories.gitlab.com/composer/october/system/CVE-2025-61676/ October CMS Vulnerable to Stored XSS via Branding Styles | GitLab Advisory Database (GLAD) CVE-2025-61676 October CMS Vulnerable to Stored XSS via Branding Styles: A cross-site scripting (XSS) vulnerabilities was identified in October CMS backend... october cms stored xss vulnerable via branding https://www.sentinelone.com/vulnerability-database/cve-2025-59574/ CVE-2025-59574: WP Travel Engine Stored XSS Vulnerability Jun 17, 2026 - CVE-2025-59574 is a stored cross-site scripting vulnerability in WP Travel Engine wte-elementor-widgets. Learn about its impact, affected versions, and... stored xss cve travel engine vulnerability https://suriq.io/blog/wordpress-core-stored-xss-cve-2026-93485 WordPress Core Stored XSS (CVE-2026-93485): Patch 7.1.1 Sep 18, 2026 - WordPress 7.1.1 fixes CVE-2026-93485, a stored cross-site scripting flaw in core that an unauthenticated comment can carry. Who is exposed and how to patch. wordpress core stored xss cve patch Sponsored https://www.camsoda.com/?id=robuta&ad_id=300x250_4.gif Free Live Sex Cams, Cam Girls, Adult Chat, and Pornstar Cams | Camsoda Join Camsoda for the hottest live cam girls! Free HD webcam shows, private sessions, and real-time chat with sexy models. Watch live now and enjoy! https://owasp10.com/lab-stored-dom-xss-portswigger/ Lab: Stored DOM XSS | Portswigger - OWASP10 Mar 6, 2023 - To solve this lab, you will need to use a DOM-based XSS attack to steal the user's session cookie and send it to the attacker's server. Here are the steps lab stored dom xss portswigger https://www.fused.com/wordpress-vulnerabilities/plugins/visitors-traffic-real-time-statistics/cve-2026-97341/ CVE-2026-97341: Visitor Traffic Real Time Statistics: Stored DOM XSS through forwarded IP headers °... The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header in all… real time cve visitor traffic statistics https://blueredix.com/de/wissen/cross-site-scripting/ Cross-Site Scripting (XSS): Stored, Reflected, DOM |blueredix May 6, 2026 - XSS lässt Angreifer eigenes JavaScript im Browser anderer Besucher ausführen. Der Artikel erklärt die drei Varianten und die modernen Schutzmaßnahmen,... cross site scripting xss stored reflected dom https://flatt.tech/cve/CVE-2023-49119 CVE-2023-49119 | Stored Cross-Site Scripting (XSS) via img Tags in GROWI | GMO Flatt Security cross site scripting cve stored xss via