xss - Robuta Search

https://security.snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-5487996 Cross-site Scripting (XSS) in pimcore/pimcore | CVE-2023-2327 | Snyk Medium severity (4) Cross-site Scripting (XSS) in pimcore/pimcore | CVE-2023-2327 cross site scripting xss pimcore cve snyk https://vulntitan.com/vulnerabilities/5076 CVE-2023-1840 Sp*tify Play Button for WordPress Stored XSS Fixed in 2.08 | VulnTitan CVE-2023-1840 Stored Cross-Site Scripting in Plugin Sp*tify Play Button for WordPress; affects Versions up to 2.07; fixed in 2.08; CVSS 4.4 medium severity. play button for wordpress cve sp stored https://www.miggo.io/vulnerability-database/cve/CVE-2023-29508 CVE-2023-29508: XWiki LiveData Macro XSS Bug | Miggo XWiki Platform Live Data macro stored XSS executes arbitrary scripts via malicious input, leveraging the last author's rights for privilege escalation. cve xwiki livedata macro xss https://cvefeed.io/vuln/detail/CVE-2009-4557 CVE-2009-4557 - Drupal Image Assist XSS Apr 23, 2026 - Cross-site scripting (XSS) vulnerability in the Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before... cve drupal image assist xss https://www.sentinelone.com/vulnerability-database/cve-2025-67475/ CVE-2025-67475: MediaWiki XSS Vulnerability CVE-2025-67475 is a cross-site scripting vulnerability in MediaWiki. Learn about its impact, affected versions, and mitigation methods. xss vulnerability cve mediawiki https://vulntitan.com/vulnerabilities/11992 CVE-2023-51370 WP Chat App Stored XSS Fixed in 3.4.5 | VulnTitan CVE-2023-51370 Stored Cross-Site Scripting in Plugin WP Chat App; affects Versions up to 3.4.4; fixed in 3.4.5; CVSS 4.4 medium severity. chat app cve wp stored xss https://lists.zx2c4.com/pipermail/cgit/2016-January/002813.html XSS in cgit xss cgit https://www.sentinelone.com/vulnerability-database/cve-2026-41063/ CVE-2026-41063: WWBN AVideo XSS Vulnerability CVE-2026-41063 is an XSS vulnerability in WWBN AVideo platform. Learn about its impact, affected versions, and mitigation methods. xss vulnerability cve https://projects.theforeman.org/issues/6580 Bug #6580: CVE-2014-3531 - XSS in operating system name / description - Foreman operating system bug cve xss name https://advisories.gitlab.com/golang/github.com/navidrome/navidrome/CVE-2026-25578/ Navidrome has XSS via comment from song metadata | GitLab Advisory Database (GLAD) CVE-2026-25578 Navidrome has XSS via comment from song metadata: An XSS vulnerability in the frontend allows a malicious attacker to inject code through the... navidrome xss via comment song https://www.exploit-db.com/exploits/51564 Alkacon OpenCMS 15.0 - Multiple Cross-Site Scripting (XSS) - Java webapps Exploit Jul 3, 2023 - Alkacon OpenCMS 15.0 - Multiple Cross-Site Scripting (XSS).. webapps exploit for Java platform cross site scripting opencms multiple xss java https://deepwiki.com/un9nplayer/AutoRecon-XSS/4.2-external-tool-integration External Tool Integration | un9nplayer/AutoRecon-XSS | DeepWiki This document details how the AutoRecon-XSS system integrates with external security tools to perform automated XSS vulnerability reconnaissance. The system... external tool integration xss deepwiki https://www.sentinelone.com/vulnerability-database/cve-2026-40302/ CVE-2026-40302: Netfoundry Zrok XSS Vulnerability CVE-2026-40302 is a cross-site scripting vulnerability in Netfoundry Zrok. Learn about its impact, affected versions, and mitigation methods. xss vulnerability cve netfoundry https://lists.osgeo.org/pipermail/mapserver-users/2017-August/080147.html [mapserver-users] [mapserver-dev] XSS vulnerability on the 'layer' parameter of WMTS (mapcache) xss vulnerability on the mapserver users dev https://www.sentinelone.com/vulnerability-database/cve-2025-28934/ CVE-2025-28934: Simple Post Series XSS Vulnerability CVE-2025-28934 is a reflected XSS vulnerability in Simple Post Series plugin. Learn about its impact, affected versions, and mitigation methods. simple post xss vulnerability cve series https://advisories.gitlab.com/composer/microweber/microweber/CVE-2022-0698/ Microweber vulnerable to cross-site scripting (XSS) | GitLab Advisory Database (GLAD) CVE-2022-0698 Microweber vulnerable to cross-site scripting (XSS): Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via... cross site scripting microweber vulnerable xss gitlab https://security.snyk.io/vuln/SNYK-PHP-THORSTENPHPMYFAQ-3231350 Cross-site Scripting (XSS) in thorsten/phpmyfaq | CVE-2023-0313 | Snyk Medium severity (4.3) Cross-site Scripting (XSS) in thorsten/phpmyfaq | CVE-2023-0313 cross site scripting xss thorsten phpmyfaq cve https://www.sentinelone.com/vulnerability-database/cve-2025-13368/ CVE-2025-13368: Xpro Addons for Elementor XSS Vulnerability CVE-2025-13368 is a stored XSS vulnerability in Xpro Addons for Elementor plugin. Learn about its impact, affected versions, and mitigation methods. for elementor xss vulnerability cve xpro addons https://www.miggo.io/vulnerability-database/cve/CVE-2026-23891 CVE-2026-23891: Decidim User Name Stored XSS | Miggo Decidim stored XSS in the user name field executes arbitrary code in victim browsers visiting comment pages, compromising account confidentiality and integrity. user name cve decidim stored xss https://www.sentinelone.com/vulnerability-database/cve-2025-23688/ CVE-2025-23688: Cobwebo URL Plugin XSS Vulnerability CVE-2025-23688 is a reflected XSS vulnerability in Cobwebo URL Plugin. Learn about its impact, affected versions, and mitigation methods. xss vulnerability cve url plugin https://s4e.io/tools/php-login-system-xss-cve-2023-38875 CVE-2023-38875 Scanner - Cross-Site Scripting (XSS) vulnerability in PHP Login System Detects 'Cross-Site Scripting (XSS)' vulnerability in PHP Login System affects v. 2.0.1. This scanner checks for the presence of unsanitized input leading to... cross site scripting xss vulnerability login system cve scanner https://cvefeed.io/vuln/detail/CVE-2012-4496 CVE-2012-4496 - Drupal Custom Publishing Options XSS Allows Administered Nodes standalone XSS Apr 29, 2026 - Cross-site scripting (XSS) vulnerability in the Custom Publishing Options module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the... custom publishing cve drupal options xss https://www.miggo.io/vulnerability-database/cve/CVE-2023-1878 CVE-2023-1878: phpmyfaq Adminlog Stored XSS | Miggo phpMyFAQ stored XSS in the adminlog via unsanitized user input injects malicious scripts, leading to administrator session hijacking and unauthorized actions. cve phpmyfaq stored xss https://theswissquality.ch/preventing-cross-site-scripting-xss-attacks-essential-strategies-for-swiss-businesses/ Preventing Cross-Site Scripting (XSS) Attacks: Essential Strategies for Swiss Businesses - The... Sep 11, 2024 - Preventing cross-site scripting (XSS) attacks is a critical aspect of web security that every business, especially those in tech-savvy Swiss cities like cross site scripting xss attacks essential strategies https://advisories.gitlab.com/npm/ckeditor5/CVE-2025-58064/ CKEditor 5 cross-site scripting (XSS) vulnerability in the clipboard package | GitLab Advisory... CVE-2025-58064 CKEditor 5 cross-site scripting (XSS) vulnerability in the clipboard package: A Cross-Site Scripting (XSS) vulnerability has been discovered in... cross site scripting xss vulnerability ckeditor clipboard package https://dev.to/rodrigojavornik/xss-attack-why-striptags-is-not-enough-5gmo XSS Attack - Why strip_tags is not enough - DEV Community In PHP, it is common to use the strip_tags() function as a way to prevent XSS intrusion. However,... Tagged with php, xss, security, programming. is not dev community xss attack strip https://www.sentinelone.com/vulnerability-database/cve-2025-23678/ CVE-2025-23678: LocalGrid Reflected XSS Vulnerability CVE-2025-23678 is a reflected XSS vulnerability in LocalGrid plugin. Learn about its impact, affected versions, and mitigation methods. reflected xss cve vulnerability https://advisories.gitlab.com/composer/librenms/librenms/CVE-2024-49764/ LibreNMS has a Stored XSS ('Cross-site Scripting') in... CVE-2024-49764 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php: A Stored Cross-Site Scripting (XSS)... cross site scripting librenms stored xss https://www.sentinelone.com/vulnerability-database/cve-2025-32649/ CVE-2025-32649: GB Gallery Slideshow XSS Vulnerability CVE-2025-32649 is a reflected XSS vulnerability in GB Gallery Slideshow plugin. Learn about its impact, affected versions, and mitigation methods. xss vulnerability cve gb gallery slideshow https://viblo.asia/tags/xss/questions XSS - Viblo Technology Articles Platform from Asia, filled with latest information on Programming Languages and Frameworks. Ruby on Rails / PHP / Swift / Unity / Java /.Net xss https://advisories.gitlab.com/npm/vega-functions/CVE-2025-26619/ Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode expressionInterpeter |... CVE-2025-26619 Vega Cross-Site Scripting (XSS) via event filter when not using CSP mode expressionInterpeter: In vega 5.30.0 and lower, vega-functions 5.15.0... cross site scripting vega xss via event https://vulntitan.com/vulnerabilities/7025 WooCommerce XSS Vulnerability Fixed in 8.4.0 | VulnTitan Cross-Site Scripting vulnerability in Plugin WooCommerce; affects Versions before 8.4.0; fixed in 8.4.0; CVSS 6.1 medium severity. xss vulnerability woocommerce fixed https://checkmk.com/werk/4757 Werk #4757: Fixed possible reflected XSS in webapi.py In the Check_MK 1.4 branch URLs like this could be used for a reflected xss werk fixed possible webapi https://advisories.gitlab.com/golang/github.com/siyuan-note/siyuan/kernel/GHSA-8q5w-mmxf-48jg/ SiYuan has incomplete fix for CVE-2026-33066: XSS | GitLab Advisory Database (GLAD) GHSA-8q5w-mmxf-48jg SiYuan has incomplete fix for CVE-2026-33066: XSS: The incomplete fix for SiYuan's bazaar README rendering enables the Lute HTML sanitizer... siyuan incomplete fix cve xss https://www.sentinelone.com/vulnerability-database/cve-2026-4379/ CVE-2026-4379: LightPress Lightbox WordPress XSS Flaw CVE-2026-4379 is a stored XSS vulnerability in LightPress Lightbox for WordPress. Learn about its impact, affected versions, and mitigation methods. cve lightbox wordpress xss flaw https://www.zbms.co.zw/shop/steel/piping/seamless/300mm-by-323-8mm-by-25-4mm-by-273mm-by-xss-120/ 300mm by 323.8mm by 25.4mm by 273mm by XSS 120 - Zimbabwe Building Materials Suppliers Aug 29, 2025 - Product name sequence: Norminal Bore (mm) by OD (mm) by Wall Thickness (mm) by ID (mm) by Shedule Number building materials xss zimbabwe suppliers https://security.snyk.io/vuln/SNYK-PHP-THORSTENPHPMYFAQ-5926733 Cross-site Scripting (XSS) in thorsten/phpmyfaq | CVE-2023-5320 | Snyk Medium severity (6.1) Cross-site Scripting (XSS) in thorsten/phpmyfaq | CVE-2023-5320 cross site scripting xss thorsten phpmyfaq cve https://advisories.gitlab.com/maven/org.opencms/opencms-core/CVE-2023-6379/ Alkacon OpenCMS XSS via Mercury template | GitLab Advisory Database (GLAD) CVE-2023-6379 Alkacon OpenCMS XSS via Mercury template: Cross-site scripting (XSS) vulnerability in Alkacon Software Open CMS, affecting versions 14 and 15 of... opencms xss via mercury template https://www.sentinelone.com/vulnerability-database/cve-2025-32605/ CVE-2025-32605: MemberPress Discord Addon XSS Vulnerability CVE-2025-32605 is a reflected XSS vulnerability in MemberPress Discord Addon. Learn about its impact, affected versions, and mitigation methods. xss vulnerability cve memberpress discord addon https://security.snyk.io/vuln/SNYK-ALPINE321-GO-8485889 Cross-site Scripting (XSS) in go | CVE-2020-24553 | Snyk Medium severity (6.1) Cross-site Scripting (XSS) in go | CVE-2020-24553 cross site scripting xss go cve snyk https://journal.upgris.ac.id/index.php/JIU/article/view/10271 Analisis Kerentanan XSS dan Rate Limiting Pada Website SMAN 8 Denpasar Menggunakan Framework OWASP... Analisis Kerentanan XSS dan Rate Limiting Pada Website SMAN 8 Denpasar Menggunakan Framework OWASP ZAP rate limiting analisis xss dan denpasar https://vulntitan.com/vulnerabilities/9971 CVE-2018-17946 Slideshow Gallery LITE XSS Fixed in 1.6.6 | VulnTitan CVE-2018-17946 Cross-Site Scripting in Plugin Slideshow Gallery LITE; affects Versions up to 1.6.5; fixed in 1.6.6; CVSS 6.1 medium severity. slideshow gallery cve lite xss fixed https://www.tripwire.com/state-of-security/ebay-patches-xss-flaw-that-could-have-allowed-attackers-to-steal-user-passwords eBay Patches XSS Flaw that Could Have Allowed Attackers to Steal User Passwords eBay has patched an XSS vulnerability that attackers could have exploited in order to steal users' passwords. ebay patches xss flaw could https://www.hareline.com/item?category=Hooks+/+Shanks&line=Kona+XSS+Xtra+Strong+Stinger+Hooks&stockcode=KXSS02 Kona XSS Xtra Strong Stinger Hook Hooks 25 Pack Size #2 - Hareline Dubbin Hareline Dubbin, Inc. manufactures and distributes some of the world's finest fly tying materials available in today's market. pack size kona xss xtra strong https://www.sentinelone.com/vulnerability-database/cve-2025-22331/ CVE-2025-22331: Cf7Save Extension XSS Vulnerability CVE-2025-22331 is a reflected XSS vulnerability in Cf7Save Extension plugin. Learn about its impact, affected versions, and mitigation methods. xss vulnerability cve extension https://beaglesecurity.com/blog/support/vulnerability/2018/06/26/WordPress-VideoJS-plugins-Cross-site-Scripting-(XSS).html WordPress VideoJS plugins Cross-site Scripting (XSS) WordPress VideoJS HTML5 Player plugin contains cross-site scripting vulnerabilities affecting video playback functionality on both desktop and mobile devices.... cross site scripting wordpress plugins xss https://www.openwall.com/lists/oss-security/2010/12/21/4 oss-security - CVE Request -- MHonArc: Improper escaping of certain HTML sequences (XSS) oss security cve request mhonarc improper https://www.prsol.cc/2026/05/01/over-10000-zimbra-servers-vulnerable-to-ongoing-xss-attacks/ Over 10,000 Zimbra servers vulnerable to ongoing XSS attacks - PRSOL:CC May 1, 2026 - Over 10,000 Zimbra Collaboration Suite (ZCS) instances exposed online are vulnerable to ongoing attacks exploiting a cross-site scripting (XSS) security flaw,... zimbra servers vulnerable ongoing xss https://www.sentinelone.com/vulnerability-database/cve-2025-31901/ CVE-2025-31901: Digihood HTML Sitemap XSS Vulnerability CVE-2025-31901 is a reflected XSS vulnerability in Digihood HTML Sitemap plugin. Learn about its impact, affected versions, and mitigation methods. html sitemap xss vulnerability cve https://stack.watch/vuln/CVE-2025-68385/ Vega XSS via Input Neutralization Bypass (CVE-2025-68385): CVE-2025-68385 December 2025 vega xss via input bypass https://advisories.gitlab.com/pypi/flask-appbuilder/CVE-2024-27083/ Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS) | GitLab Advisory... CVE-2024-27083 Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS): A Cross-Site Scripting (XSS) vulnerability has been discovered on the... cross site scripting login page flask appbuilder oauth https://cvefeed.io/vuln/detail/CVE-2026-30048 CVE-2026-30048 - NotChatbot WebChat Widget Stored XSS Vulnerability Apr 27, 2026 - A stored cross-site scripting (XSS) vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before... xss vulnerability cve webchat widget stored https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/bart/CVE-2022-45387/ Jenkins BART Plugin vulnerable to cross-site scripting (XSS) | GitLab Advisory Database (GLAD) CVE-2022-45387 Jenkins BART Plugin vulnerable to cross-site scripting (XSS): Jenkins BART Plugin 1.0.3 and earlier does not escape the parsed content of build... cross site scripting jenkins bart plugin vulnerable https://www.sentinelone.com/vulnerability-database/cve-2025-22332/ CVE-2025-22332: CloudFlare Cache Purge XSS Vulnerability CVE-2025-22332 is a reflected XSS vulnerability in CloudFlare Cache Purge plugin. Learn about its impact, affected versions, and mitigation methods. xss vulnerability cve cloudflare cache purge https://www.fox-it.com/nl-en/research/technical-advisory-sql-injection-and-reflected-cross-site-scripting-xss-vulnerabilities-in-oracle-communications-diameter-signaling-router-cve-2020-14787-cve-2020-14788/ Technical Advisory: SQL Injection and Reflected Cross-Site Scripting (XSS) Vulnerabilities in... cross site scripting technical advisory sql injection reflected xss https://www.miggo.io/vulnerability-database/cve/CVE-2023-46494 CVE-2023-46494: EverShop Admin ProductGrid XSS | Miggo EverShop XSS in the admin ProductGrid function executes arbitrary scripts in a victim's browser via a crafted request, stealing sensitive session data. cve admin xss https://blog.hboeck.de/archives/458-XSS-on-eplus.de.html XSS on eplus.de - Hanno's blog s blog xss eplus de hanno https://api.drupal.org/api/drupal/core%21lib%21Drupal%21Component%21Utility%21Xss.php/function/Xss%3A%3AgetHtmlTagList/9 function Xss::getHtmlTagList | Drupal API function xss drupal api https://advisories.gitlab.com/npm/@webrecorder/wabac/CVE-2025-58765/ Webrecorder packages are vulnerable to XSS through 404 error handling logic | GitLab Advisory... CVE-2025-58765 Webrecorder packages are vulnerable to XSS through 404 error handling logic: A Reflected Cross-Site Scripting (XSS) vulnerability exists in the... error handling webrecorder packages vulnerable xss https://advisories.gitlab.com/npm/svelte/GHSA-gw32-9rmw-qwww/ svelte is vulnerable to XSS with textarea bind:value | GitLab Advisory Database (GLAD) svelte vulnerable xss textarea bind https://advisories.gitlab.com/composer/wwbn/avideo/CVE-2026-33499/ AVideo has Reflected XSS via unlockPassword Parameter in forbiddenPage.php and warningPage.php |... CVE-2026-33499 AVideo has Reflected XSS via unlockPassword Parameter in forbiddenPage.php and warningPage.php: The view/forbiddenPage.php and... reflected xss via parameter php https://www.invicti.com/web-applications-advisories/xss-and-blind-sql-injection-vulnerabilities-in-exponentcms XSS and Blind SQL Injection Vulnerabilities in ExponentCMS | Invicti Details for XSS and Blind SQL Injection Vulnerabilities in ExponentCMS blind sql injection xss vulnerabilities invicti https://www.hendryadrian.com/massive-wordpress-plugin-vulnerability-exposes-millions-to-xss-attacks/ Massive WordPress Plugin Vulnerability Exposes Millions to XSS Attacks Feb 26, 2025 - The vulnerability, tracked as CVE-2025-24752, is a reflected Cross-Site Scripting (XSS) issue that could allow malicious actors to inject harmful scripts into... wordpress plugin massive vulnerability exposes millions https://snippets.cacher.io/snippet/c9b2f70bfe6d9ce0459a Prevent XSS Attacks and Spamming. Creating a honeypot field. - Cacher Snippet Prevent XSS Attacks and Spamming. Creating a honeypot field. - @RPeraltaJr shared this Cacher snippet. Cacher is the code snippet organizer that empowers... honeypot field prevent xss attacks spamming https://vulntitan.com/vulnerabilities/5270749 CVE-2026-25306 XStore Core XSS Fixed in 5.6.5 | VulnTitan CVE-2026-25306 Cross-Site Scripting in Plugin XStore Core; affects Versions up to 5.6.4; fixed in 5.6.5; CVSS 6.1 medium severity. cve xstore core xss fixed https://advisories.gitlab.com/composer/typo3/neos/GHSA-4542-p56h-8xww/ Cross-Site Scripting (XSS) vulnerabilities in Neos | GitLab Advisory Database (GLAD) GHSA-4542-p56h-8xww Cross-Site Scripting (XSS) vulnerabilities in Neos: It has been discovered that Neos is vulnerable to several XSS attacks. Through these... cross site scripting xss vulnerabilities neos gitlab https://advisories.gitlab.com/composer/bigfork/silverstripe-form-capture/CVE-2023-28851/ Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | GitLab Advisory... CVE-2023-28851 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS): Silverstripe Form Capture provides a method to capture simple... html tags web page improper script related https://www.invicti.com/web-applications-advisories/cve-2015-1384-xss-vulnerability-in-banner-effect-header XSS Vulnerability in Banner Effect Header WordPress Plugin | Invicti Details for XSS Vulnerability in Banner Effect Header WordPress Plugin xss vulnerability wordpress plugin banner effect header https://de.wordpress.org/plugins/tags/xss/ Plugins, die als xss kategorisiert sind | WordPress.org Deutsch plugins die als xss sind https://beaglesecurity.com/blog/vulnerability/icewarp-webmail-xss.html IceWarp WebMail XSS Description A Cross site scripting(XSS) is existing in IceWarp Webmail Server through 11.4.4.1, in /webmail/colour parameter. Recommendation Update IceWarp to... icewarp webmail xss https://redmine.pfsense.org/issues/3461?tab=history Bug #3461: XSS - package system - pfSense - pfSense bugtracker package system bug xss pfsense https://translate.codeberg.org/projects/cantiga/glossary/es/!~codeberger~!.gedrohte-antenna%27s/Bork-eingefugtem/abductees-Rechthabers/einzuscannen/ Safely when XSS. safely xss https://websitematics.com/how-to-use-javascript-sanitization-libraries-for-xss-defense/ How to Use Javascript Sanitization Libraries for Xss Defense | Websitematics Mar 16, 2026 - Cross-site scripting (XSS) is a common security vulnerability that can compromise web applications. Using JavaScript sanitization libraries is an effective way. how to use javascript sanitization libraries xss https://supportenterprisevault.cloud.com/external/article/100071652/veritas-data-insight-reflected-cross-sit.html Veritas Data Insight Reflected Cross Site Scripting (XSS) Vulnerability Veritas Data Insight Reflected Cross Site Scripting (XSS) Vulnerability cross site scripting data insight xss vulnerability veritas reflected https://www.miggo.io/vulnerability-database/cve/CVE-2025-4388 CVE-2025-4388: Liferay Marketplace App Mgr XSS | Miggo Liferay Portal reflected XSS in marketplace-app-manager-web lets remote unauth attackers inject arbitrary JavaScript into user sessions via crafted URLs. marketplace app cve liferay mgr xss https://www.openwall.com/lists/oss-security/2011/06/08/2 oss-security - CVE Request -- Coppermine Photo Gallery -- cpg1.4.27 / cpg1.5.12 -- XSS flaw coppermine photo gallery oss security cve request xss https://fluidattacks.com/es/advisories/malone Browsershot 3.57.3 - Server Side XSS to LFR via HTML | Fluid Attacks AppSec solution that integrates AI, automated tools, and pentesters to help you prevent, detect, manage, and fix vulnerabilities continuously across your SDLC. server side xss via html https://www.miggo.io/vulnerability-database/cve/CVE-2023-28476 CVE-2023-28476: Concrete CMS File Upload Tag XSS | Miggo Concrete CMS stored XSS in file upload tags executes arbitrary JavaScript in victim browsers via crafted metadata, compromising user sessions and data. concrete cms file upload cve tag xss https://www.sentinelone.com/vulnerability-database/cve-2025-32632/ CVE-2025-32632: Automatic Ban IP Plugin XSS Vulnerability CVE-2025-32632 is a reflected XSS vulnerability in Automatic Ban IP plugin. Learn about its impact, affected versions, and mitigation methods. xss vulnerability cve automatic ban ip https://www.sentinelone.com/vulnerability-database/cve-2017-20239/ CVE-2017-20239: MDwiki XSS Vulnerability CVE-2017-20239 is a cross-site scripting vulnerability in MDwiki. Learn about its impact, affected versions, and mitigation methods. xss vulnerability cve mdwiki https://www.miggo.io/vulnerability-database/cve/CVE-2025-43770 CVE-2025-43770: Liferay Portal Null Byte XSS | Miggo Liferay Portal reflected XSS from null byte injection in referer/FORWARD_URL params executes arbitrary JS in user browsers via specially crafted URLs. null byte cve liferay portal xss https://advisories.gitlab.com/composer/magento/project-community-edition/CVE-2024-39400/ Magento DOM-based Cross-Site Scripting (XSS) vulnerability | GitLab Advisory Database (GLAD) CVE-2024-39400 Magento DOM-based Cross-Site Scripting (XSS) vulnerability: Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by... cross site scripting xss vulnerability magento dom based https://advisories.gitlab.com/npm/svelte/CVE-2026-27902/ Svelte: XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers | GitLab Advisory... CVE-2026-27902 Svelte: XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers: Errors from transformError were not correctly escaped prior to... svelte xss via html comment https://www.sentinelone.com/vulnerability-database/cve-2025-23851/ CVE-2025-23851: COVID-19 Data Widgets XSS Vulnerability CVE-2025-23851 is a reflected XSS vulnerability in Coronavirus Data Widgets plugin. Learn about its impact, affected versions, and mitigation methods. data widgets xss vulnerability cve covid https://security.snyk.io/vuln/SNYK-PHP-PHPOFFICEPHPSPREADSHEET-16347736 Cross-site Scripting (XSS) in phpoffice/phpspreadsheet | CVE-2026-40902 | Snyk High severity (8.7) Cross-site Scripting (XSS) in phpoffice/phpspreadsheet | CVE-2026-40902 cross site scripting xss cve snyk https://courses.stationx.net/courses/1990440/lectures/45048477 Introduction to XSS Vulnerabilities & Its Types | StationX - Cyber Learn how to discover bugs / vulnerabilities like experts | OWASP top 10 + more introduction to xss vulnerabilities types cyber https://cvefeed.io/vuln/detail/CVE-2025-23626 CVE-2025-23626 - WordPress Kumihimo plugin = 1.0.2 - Reflected Cross Site Scripting (XSS)... Apr 23, 2026 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fukushima Kumihimo kumihimo allows Reflected XSS.This... cross site scripting cve wordpress kumihimo plugin https://securityvulnerability.io/vulnerability/CVE-2025-47673 CVE-2025-47673 : Reflected XSS Vulnerability in Arconix Shortcodes by Tychesoftwares Apr 29, 2026 - Learn about the reflected XSS vulnerability in Arconix Shortcodes affecting multiple versions. Protect your site from CVE-2025-47673 risks. reflected xss cve vulnerability shortcodes https://advisories.gitlab.com/maven/org.apache.jspwiki/jspwiki-main/CVE-2025-24854/ Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability in the Image Plugin | GitLab Advisory... CVE-2025-24854 Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability in the Image Plugin: A carefully crafted request using the Image plugin could trigger an... cross site scripting xss vulnerability the image apache jspwiki https://www.sentinelone.com/vulnerability-database/cve-2025-23682/ CVE-2025-23682: Preloader Quotes XSS Vulnerability CVE-2025-23682 is a reflected XSS vulnerability in Preloader Quotes plugin. Learn about its impact, affected versions, and mitigation methods. xss vulnerability cve preloader quotes https://advisories.gitlab.com/maven/com.liferay.portal/release.dxp.bom/CVE-2024-25610/ Liferay Portal has a Stored XSS with Blog entries (Insecure defaults) | GitLab Advisory Database... CVE-2024-25610 Liferay Portal has a Stored XSS with Blog entries (Insecure defaults): In Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions,... blog entries liferay portal stored xss https://websitematics.com/using-content-security-policy-reports-to-monitor-xss-threats/ Using Content Security Policy Reports to Monitor Xss Threats | Websitematics Mar 16, 2026 - In today's digital landscape, safeguarding websites from cross-site scripting (XSS) attacks is crucial. One effective method is utilizing Content Security... content security policy using reports monitor xss https://s4e.io/tools/wp-planet-0-1-unauthenticated-reflected-xss-cve-2014-4592 CVE-2014-4592 scanner - Cross-Site Scripting (XSS) vulnerability in WP-Planet plugin for WordPress Detects 'Cross-Site Scripting (XSS)' vulnerability in WP-Planet plugin for WordPress affects v. 0.1 and earlier. cross site scripting plugin for wordpress xss vulnerability cve scanner https://wpsearch.ai/plugins/prevent-xss-vulnerability/ Prevent XSS Vulnerability - WordPress Plugin This plugin blocks XSS by encoding harmful URL characters and safely handling HTML in $_GET. It offers customizable settings for enhanced website security. xss vulnerability wordpress plugin prevent https://cvefeed.io/capec/detail/capec-199-xss-using-alternate-syntax CAPEC-199: XSS Using Alternate Syntax An adversary uses alternate forms of keywords or commands that result in the same action as the primary form but which may not be caught by filters. For... alternate syntax xss using https://cvefeed.io/vuln/detail/CVE-2015-2207 CVE-2015-2207 - NetCracker Resource Management System XSS Vulnerabilities Nov 21, 2024 - Multiple cross-site scripting (XSS) vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated users to inject arbitrary... resource management cve netcracker system xss https://www.miggo.io/vulnerability-database/cve/GHSA-69hx-63pv-f8f4 GHSA-69hx-63pv-f8f4: Ech0 File Upload SVG/HTML XSS | Miggo Ech0 stored XSS via SVG upload or Content-Type bypass in its file upload handler executes arbitrary script in the origin for session hijacking and data theft. file upload ghsa svg html xss https://redmine.pfsense.org/issues/8726?tab=history Bug #8726: Lack of input validation on custom GUI/dashboard settings leads to potential XSS -... input validation leads to bug lack custom https://security.snyk.io/vuln/SNYK-PHP-THORSTENPHPMYFAQ-72060 Cross-site Scripting (XSS) in thorsten/phpmyfaq | CVE-2017-14619 | Snyk Medium severity (6.1) Cross-site Scripting (XSS) in thorsten/phpmyfaq | CVE-2017-14619 cross site scripting xss thorsten phpmyfaq cve https://vulntitan.com/vulnerabilities/6484 CVE-2024-24928 Content Cards Stored XSS CVSS 6.4 | VulnTitan CVE-2024-24928 Stored Cross-Site Scripting in Plugin Content Cards; affects Versions up to 0.9.7; no patched release listed; CVSS 6.4 medium severity. cve content cards stored xss