Search: xss.is

Semantic MediaWiki versions from 3.1.0 up to but not including 7.3.1 contain a reflected cross-site scripting (XSS) vulnerability in the Special:SMWAdmin ID lookup feature. This vulnerability allows unauthenticated attackers to inject malicious markup via the unescaped 'id' parameter. By tricking an administrator into clicking a crafted link, attackers can bypass the auto-satisfied edit-token check and execute scripts within the administrator's session, potentially performing privileged actions.

Semantic MediaWiki versions from 3.0.0 up to but not including 7.3.1 contain a cross-site scripting (XSS) vulnerability. This flaw allows attackers to inject malicious markup into semantic property values that are rendered unescaped in autocomplete suggestions. When a user opens the property-value autocomplete with an empty query, the vulnerable JavaScript concatenates raw API values into HTML, potentially executing arbitrary scripts.

SemanticMediaWiki versions from 3.0.0 up to but not including 7.3.1 contain a reflected cross-site scripting (XSS) vulnerability in the Special:Ask feature. This flaw arises because certain separator parameters are output without proper HTML escaping in various result printers. Unauthenticated attackers can exploit this by crafting malicious Special:Ask links that execute JavaScript in the context of the wiki, potentially stealing session cookies or CSRF tokens.

SemanticMediaWiki versions from 3.1.0 up to but not including 7.3.1 contain a reflected cross-site scripting (XSS) vulnerability. This flaw allows unauthenticated attackers to inject malicious scripts via the unescaped default parameter in JsonResultPrinter. Exploitation involves tricking users into visiting a specially crafted Special:Ask link with a zero-result query and a specific request_type, leading to execution of JavaScript in the context of the wiki. This can result in theft of session cookies or CSRF tokens.

CVE-2026-117493 is a stored cross-site scripting (XSS) vulnerability in BloX widgets. The API endpoint /api/dashboards/<id>/widgets/<id> accepts HTML and JavaScript content in the 'desc' and 'text' parameters, which is executed in the browser when the widget is rendered. This can lead to compromise of confidentiality of information accessible in that context.

A Cross-Site Scripting (XSS) vulnerability exists in the processing of SVG images submitted to the /api/v2/ai/sessions API when using the data:image/svg+xml;base64 format. Embedded script tags in the SVG are executed when rendered in the assistant window, enabling JavaScript execution and content manipulation.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and Telecommunications Limited Company Kulga News Software allows Reflected XSS. This issue affects Kulga News Software: from v26.7.4 before v26.10.0.

The Advanced Views – Display Framework for Gutenberg & Elementor WordPress plugin suffers from a stored cross-site scripting (XSS) vulnerability in the 'comment' parameter in all versions up to and including 3.9.6. This flaw allows unauthenticated attackers to inject malicious scripts that execute when any user views a page containing the injected comment. The vulnerability is notable because it affects even pending or unapproved comments, as the plugin does not filter comments by approval status when retrieving them.

Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - The “was this article helpful” voting widget posts a client-supplied ip field to its AJAX handlers (getDeny, getConfirm, getDenyReason in mod_djhelpful_articles/helper.php), reachable without authentication through com_ajax. The value was stored exactly as submitted instead of being taken from the connection by the server. It was then printed without output escaping in the administrator backend’s “Helpful articles” overview (views/items/tmpl/default.php). $db->quote() was applied on insert, which protects the SQL statement but does nothing for HTML output. There was no CSRF token, no rate limit, and the vote de-duplication keyed on the same attacker-controlled field.

CVE-2026-117539 is a cross-site scripting (XSS) vulnerability in darylldoyle's svg-sanitizer versions before 1.0.0. It allows attackers to embed external resources by uploading crafted SVG files that contain unsanitized style content, unquoted url() values, or image href attributes. This can lead to exfiltration of page data, user tracking, or disclosure of visitor IP addresses.

REDAXO core versions prior to 5.21.0 contain a reflected cross-site scripting (XSS) vulnerability. Authenticated attackers can exploit this flaw by injecting malicious scripts via the 'type' parameter of the metainfo_default_fields_create API. The vulnerability arises because rex_view::message() renders attacker-controlled input without proper escaping, allowing script execution in the backend session of a victim. This issue is fixed in version 5.21.0.

REDAXO core versions before 5.21.3 have a reflected cross-site scripting (XSS) vulnerability in the backend media pool detail page. The vulnerability arises because the opener_link parameter is not properly HTML escaped. An unauthenticated attacker can trick logged-in backend users with media permissions into clicking a malicious link, allowing script injection. This script can steal the victim's CSRF token and perform actions with their permissions, including code execution via template or module edits if the victim is an administrator. The issue is fixed in version 5.21.3.

REDAXO core versions from 5.18.0 up to but not including 5.21.4 contain a stored cross-site scripting (XSS) vulnerability. This occurs because the media service moves uploaded SVG files into the public media folder before sanitizing them. Authenticated users with mediapool upload rights can exploit a race condition or memory exhaustion to upload malicious SVG files that execute scripts in backend user sessions. The vulnerability has a low CVSS 4.0 score of 2.1 and was fixed in version 5.21.4.

REDAXO core versions before 5.21.4 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows content editors to inject malicious HTML via unescaped input in media, medialist, link, and linklist widgets. Exploitation can lead to script execution in administrator backend sessions, potentially hijacking accounts. The vulnerability is fixed in version 5.21.4.

SemanticMediaWiki versions from 3.1.0 up to but not including 7.3.1 contain a reflected cross-site scripting (XSS) vulnerability. This flaw allows unauthenticated attackers to inject malicious markup via the search parameter in the extended Special:Search profile. The vulnerability arises because the ProfileForm::profile_sheet function inserts unescaped user input into a pre element, enabling script execution in the context of the wiki origin. The issue is fixed in version 7.3.1.

SemanticMediaWiki versions from 4.2.0 up to but not including 7.2.1 contain a reflected cross-site scripting (XSS) vulnerability in the Special:FacetedSearch feature. This flaw allows unauthenticated attackers to inject arbitrary HTML and script code via crafted cstate parameters, potentially leading to script execution in users' browsers. The vulnerability is fixed in version 7.2.1.

SemanticMediaWiki versions from 2.5.0 up to but not including 7.3.1 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows users with page-edit rights to inject malicious script via Code-typed property values. The vulnerability arises because the CodeStringValueFormatter renders annotated JSON values containing HTML markup unescaped on the Special:Browse page, enabling JavaScript execution in the browsers of users viewing the page. The issue is fixed in version 7.3.1.

SemanticMediaWiki versions from 3.2.0 up to but not including 7.3.1 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows users with the smw-schemaedit permission to inject malicious script code via the canonical_name property of a property group schema. The injected script is rendered unescaped in Special:Browse headings by GroupFormatter, leading to JavaScript execution in the browsers of users viewing those pages, including administrators.

Semantic MediaWiki versions from 3.0.0 up to but not including 7.3.1 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows users with page-edit rights to inject malicious HTML via Keyword-typed property values that are rendered without proper escaping on the Special:Browse page. Exploitation can lead to execution of arbitrary JavaScript in the context of other users' sessions, including administrators, potentially allowing token theft and unauthorized actions. The vulnerability is fixed in version 7.3.1.

Semantic MediaWiki versions from 2.5.0 up to but not including 7.3.1 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows users with page-edit rights to inject malicious scripts via External identifier property values. The vulnerability arises because the ExternalIdentifierValue renders markup payloads unescaped on the Special:Browse page, enabling script execution in the browsers of users viewing the page, including administrators. The issue is fixed in version 7.3.1.