Threats tagged 'xss'

70 threats

Severity	CVSS	Threat	Source	Published
Critical	–	Ivanti EPM Update Patches Critical Remote Code Execution Flaw Critical2025-12-10SecurityWeek The XSS vulnerability could allow remote attackers to execute arbitrary JavaScript code with administrator privileges. The post Ivanti EPM Update Patches Critical Remote Code Execution Flaw appeared first on SecurityWeek . Vulnerability #remote #xss #java	SecurityWeek	2025-12-10
Medium	–	Adobe Patches Nearly 140 Vulnerabilities Medium2025-12-09SecurityWeek The Experience Manager security update resolves 117 vulnerabilities, including 116 identified as cross-site scripting (XSS) bugs. The post Adobe Patches Nearly 140 Vulnerabilities appeared first on SecurityWeek . Vulnerability #xss	SecurityWeek	2025-12-09
Medium	–	MaNGOSWebV4 4.0.6 · Reflected XSS Medium2025-12-03Exploit-DB RSS Feed MaNGOSWebV4 4.0.6 - Reflected XSS Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-12-03
Medium	–	RosarioSIS 6.7.2 - Cross-Site Scripting (XSS) Medium2025-12-03Exploit-DB RSS Feed RosarioSIS 6.7.2 - Cross-Site Scripting (XSS) Exploit #ios #web #xss	Exploit-DB RSS Feed	2025-12-03
Medium	–	RosarioSIS 6.7.2 · Cross Site Scripting (XSS) Medium2025-12-03Exploit-DB RSS Feed RosarioSIS 6.7.2 - Cross Site Scripting (XSS) Exploit #ios #web #xss	Exploit-DB RSS Feed	2025-12-03
Medium	–	MobileDetect 2.8.31 - Cross-Site Scripting (XSS) Medium2025-12-03Exploit-DB RSS Feed MobileDetect 2.8.31 - Cross-Site Scripting (XSS) Exploit #web #mobile #xss	Exploit-DB RSS Feed	2025-12-03
Medium	–	phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS) Medium2025-12-02Exploit-DB RSS Feed phpIPAM 1.6 - Reflected Cross-Site Scripting (XSS) Exploit #web #xss #php	Exploit-DB RSS Feed	2025-12-02
Medium	–	phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS) Medium2025-12-02Exploit-DB RSS Feed phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS) Exploit #web #xss #php	Exploit-DB RSS Feed	2025-12-02
Medium	–	phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS) Medium2025-12-02Exploit-DB RSS Feed phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS) Exploit #web #xss #php	Exploit-DB RSS Feed	2025-12-02
High	–	Heads Up: Scans for ESAFENET CDG V5 , (Mon, Oct 13th) High2025-10-13SANS ISC Handlers Diary In January, a possible XSS vulnerability was found in the electronic document security management system ESAFENET CDG. This was the latest (as far as I can tell) in a long list of vulnerabilities in the product. Prior vulnerabilities included SQL injection issues and weaknesses in the encryption used to safeguard documents. In other words: A typical "secure" document management system. The product appears to be targeting the Chinese market, and with a website all in Chinese, I doubt it is used much, if at all, outside China. Vulnerability #web #xss	SANS ISC Handlers Diary	2025-10-13
Medium	–	Concrete CMS 9.4.3 · Stored XSS Medium2025-09-16Exploit-DB RSS Feed Concrete CMS 9.4.3 - Stored XSS Vulnerability #web #xss #exploit	Exploit-DB RSS Feed	2025-09-16
Medium	–	RiteCMS 3.0.0 · Reflected Cross Site Scripting (XSS) Medium2025-08-18Exploit-DB RSS Feed RiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS) Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-08-18
Medium	–	atjiu pybbs 6.0.0 · Cross Site Scripting (XSS) Medium2025-08-11Exploit-DB RSS Feed atjiu pybbs 6.0.0 - Cross Site Scripting (XSS) Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-08-11
Medium	–	VMware vSphere Client 8.0.3.0 - Reflected Cross-Site Scripting (XSS) Medium2025-08-11Exploit-DB RSS Feed VMware vSphere Client 8.0.3.0 - Reflected Cross-Site Scripting (XSS) Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-08-11
Medium	–	Copyparty 1.18.6 - Reflected Cross-Site Scripting (XSS) Medium2025-08-03Exploit-DB RSS Feed Copyparty 1.18.6 - Reflected Cross-Site Scripting (XSS) Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-08-03
Medium	–	Swagger UI 1.0.3 - Cross-Site Scripting (XSS) Medium2025-08-03Exploit-DB RSS Feed Swagger UI 1.0.3 - Cross-Site Scripting (XSS) Exploit #remote #xss #exploit	Exploit-DB RSS Feed	2025-08-03
Medium	–	Mezzanine CMS 6.1.0 · Stored Cross Site Scripting (XSS) Medium2025-07-28Exploit-DB RSS Feed Mezzanine CMS 6.1.0 - Stored Cross Site Scripting (XSS) Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-07-28
Medium	–	Microsoft Edge Windows 10 Version 1511 · Cross Site Scripting (XSS) Medium2025-07-22Exploit-DB RSS Feed Microsoft Edge Windows 10 Version 1511 - Cross Site Scripting (XSS) Exploit #windows #remote #xss	Exploit-DB RSS Feed	2025-07-22
Medium	–	LiveHelperChat 4.61 · Stored Cross Site Scripting (XSS) via Telegram Bot Username Medium2025-07-22Exploit-DB RSS Feed LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Telegram Bot Username Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-07-22
Medium	–	LiveHelperChat 4.61 · Stored Cross Site Scripting (XSS) via Operator Surname Medium2025-07-22Exploit-DB RSS Feed LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Operator Surname Exploit #web #xss #exploit	Exploit-DB RSS Feed	2025-07-22

Page 3 of 4