Search: xss.is

The LiteSpeed Cache plugin for WordPress versions up to and including 7.9.1 contains a stored cross-site scripting (XSS) vulnerability via the 'bbp_reply_content' parameter. This flaw arises from insufficient input sanitization and output escaping, allowing authenticated users with subscriber-level access or higher to inject malicious scripts. Exploitation requires that an administrator has enabled Viewport Images (VPI) and configured a VPI filename that attackers can embed in user-generated content such as bbPress topics. The vulnerability has a CVSS score of 6.4, indicating a medium severity level.

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows:  parameter 'observaciones' in  /mis-gastos  endpoint.

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows:   parameter 'companyName' in  /empresa  endpoint;

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows:  parameters 'titulo_es' and 'add_etiquetas%5B%5D' in '/categorías' endpoint;

Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript code so that when a user views the page, code can be executed in the victim's browser. The list of assigned parameters and identifiers is as follows:   parameter 'nombre' in '/usuario' endpoint;

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through 1.0.7.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OceanWP OceanWP oceanwp allows Reflected XSS.This issue affects OceanWP: from n/a through 4.2.7.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Reflected XSS.This issue affects Upsell Order Bump Offer for WooCommerce: from n/a through 3.1.6.

A cross-site scripting (XSS) vulnerability in the ICTBroadcast software, which affects the demo environment. The vulnerability is found in the ‘login.php’ endpoint, where the ‘editForm[extension_username]’ parameter is reflected in the response without proper filtering. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the victim’s browser once the victim accesses the malicious URL.

The Password Protected plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in its bundled Freemius SDK up to version 2.8.4. This flaw allows authenticated users with subscriber-level access or higher to inject malicious scripts via the 'purchased_plan' parameter in wp-admin requests once the Freemius opt-in is complete. The injected scripts execute automatically when an administrator views standard admin pages, such as their Profile page.

The DSGVO All in one for WP WordPress plugin contains a stored cross-site scripting (XSS) vulnerability in all versions up to and including 5.0. This vulnerability arises from insufficient input sanitization and output escaping in the handling of comment content, specifically when the 'Google Tag Manager' integration and the 'Replace integration automatically [Beta]' option are both enabled. Exploitation requires an attacker to submit a crafted comment that must be approved by an administrator, allowing arbitrary script injection that executes when users access the affected pages.

The Enable SVG, WebP, and ICO Upload WordPress plugin versions before 1.1.6 allow animation elements in uploaded SVG files to modify link targets to javascript: URIs. This flaw enables users with author-level permissions or higher to bypass SVG sanitization and conduct stored cross-site scripting (XSS) attacks that execute in WebKit-based browsers like Safari.

The Enable SVG, WebP, and ICO Upload WordPress plugin versions before 1.1.6 improperly handle uploaded SVG files that are not detected as SVG content. These files are stored and served as SVG images without proper sanitization, which could allow users with author-level permissions or higher to execute stored cross-site scripting (XSS) attacks.

The LetterPress WordPress plugin versions before 2.4.0 do not properly sanitise and escape certain settings. This vulnerability allows high privilege users, such as administrators, to perform Stored Cross-Site Scripting (XSS) attacks even if the unfiltered_html capability is disabled, for example in multisite WordPress setups.

The Schema App Structured Data plugin for WordPress versions up to and including 2.3.2 contains a stored cross-site scripting (XSS) vulnerability via comment content when the 'Remove Microdata' output filter is enabled. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts that execute when users view the affected pages. Exploitation requires that an administrator has enabled the 'Remove Microdata' option and approved the malicious comment.

The Food Store plugin for WordPress versions up to and including 1.5.5 contains a stored cross-site scripting (XSS) vulnerability via the 'service_type' cookie. An unauthenticated attacker can inject malicious scripts by supplying a payload through the ?type= query parameter on the public checkout page. This payload is stored in the cookie, persisted to order metadata, and rendered unescaped in the admin panel, leading to script execution when accessed.

openEQUELLA versions prior to 2026.2 have a stored cross-site scripting (XSS) vulnerability in the pre-login notice feature. The notice is stored as HTML and rendered on the legacy login page without proper encoding or sanitization. Users with the EDIT_SYSTEM_SETTINGS permission can inject arbitrary scripts via the pre-login notice API endpoint. If this permission is granted to guest or Everyone users, unauthenticated exploitation is possible.

openEQUELLA versions before 2026.1 contain a vulnerability in the pre-login notice image upload endpoint that allows users with EDIT_SYSTEM_SETTINGS permission to upload HTML files without proper type validation. These files are served with a Content-Type based on the filename, enabling stored cross-site scripting (XSS). If the permission is granted to unauthenticated users, exploitation can occur without authentication.

The Ortto plugin for WordPress versions before 1.0.25 contains a stored cross-site scripting (XSS) vulnerability due to improper escaping of stored settings on its admin settings page. This flaw allows a threat actor with the ability to modify the plugin's configuration to execute arbitrary JavaScript in an administrator's session when the affected page is visited.