Cross Site Scripting

QNAP Photo Station cross-site scripting | CVE-2023-47561

February 6, 2024

NAME__________QNAP Photo Station cross-site scriptingPlatforms Affected:QNAP Photo Station 6.4Risk Level:5.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________QNAP Photo Station is vulnerable to cross-site scripting, caused...

AntiSamy cross-site scripting | CVE-2024-23635

February 6, 2024

NAME__________AntiSamy cross-site scriptingPlatforms Affected:AntiSamy AntiSamy 1.7.4Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________AntiSamy is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

facileManager cross-site scripting | CVE-2024-24571

February 4, 2024

NAME__________facileManager cross-site scriptingPlatforms Affected:facileManager facileManager 4.5.0Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________facileManager is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

Discourse cross-site scripting | CVE-2024-23834

February 4, 2024

NAME__________Discourse cross-site scriptingPlatforms Affected:Discourse Discourse 2.1.4 Discourse Discourse 3.2.0.beta4Risk Level:6.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Discourse is vulnerable to cross-site scripting, caused by improper...

HCL BigFix Platform cross-site scripting | CVE-2023-37530

February 4, 2024

NAME__________HCL BigFix Platform cross-site scriptingPlatforms Affected:HCL BigFix Platform 9.5.23 HCL BigFix Platform 10.0.10Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________HCL BigFix Platform is vulnerable...

HCL BigFix Platform cross-site scripting | CVE-2024-23553

February 4, 2024

HCL BigFix Platform cross-site scripting | CVE-2023-37527

February 4, 2024

HCL BigFix Platform cross-site scripting | CVE-2023-37529

February 4, 2024

HCL BigFix Platform cross-site scripting | CVE-2023-37531

February 4, 2024

Product Inventory with Export to Excel cross-site scripting | CVE-2024-24135

February 3, 2024

NAME__________Product Inventory with Export to Excel cross-site scriptingPlatforms Affected:Sourcecodester Product Inventory with Export to Excel 1.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Product Inventory...

Embedthis GoAhead Web Server cross-site scripting |

February 3, 2024

NAME__________Embedthis GoAhead Web Server cross-site scriptingPlatforms Affected:Goahead Goahead Webserver 2.5Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Embedthis GoAhead Web Server is vulnerable to cross-site...

Online Food Menu cross-site scripting | CVE-2024-24134

February 3, 2024

NAME__________Online Food Menu cross-site scriptingPlatforms Affected:Sourcecodester Online Food Menu 1.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Online Food Menu is vulnerable to cross-site scripting,...

Math Game with Leaderboard cross-site scripting | CVE-2024-24136

February 3, 2024

NAME__________Math Game with Leaderboard cross-site scriptingPlatforms Affected:Sourcecodester Math Game with Leaderboard 1.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Math Game with Leaderboard is vulnerable...

Group Office cross-site scripting | CVE-2024-23941

February 2, 2024

NAME__________Group Office cross-site scriptingPlatforms Affected:Group Office Group OfficeRisk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Group Office is vulnerable to cross-site scripting, caused by improper...

UserPro plugin for WordPress cross-site request forgery | CVE-2023-2439

February 2, 2024

NAME__________UserPro plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress UserPro - Community and User Profile Plugin for WordPress 5.1.5Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting...

REBUILD cross-site scripting | CVE-2024-1020

February 1, 2024

NAME__________REBUILD cross-site scriptingPlatforms Affected:Rebuild Rebuild 2.8.3Risk Level:3.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________REBUILD is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

Simple Student Result Management System cross-site scripting | CVE-2024-1022

February 1, 2024

NAME__________Simple Student Result Management System cross-site scriptingPlatforms Affected:CodeAstro Simple Student Result Management System 5.6Risk Level:2.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Simple Student Result Management...

eReserv cross-site scripting | CVE-2024-1026

February 1, 2024

NAME__________eReserv cross-site scriptingPlatforms Affected:Cogites eReserv 7.7.58Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________eReserv is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

eReserv cross-site scripting | CVE-2024-1029

February 1, 2024

Facebook News Feed Like cross-site scripting | CVE-2024-1028

February 1, 2024

NAME__________Facebook News Feed Like cross-site scriptingPlatforms Affected:Sourcecodester Facebook News Feed Like 1.0Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Facebook News Feed Like is vulnerable...

eReserv cross-site scripting | CVE-2024-1030

February 1, 2024

Expense Management System cross-site scripting | CVE-2024-1031

February 1, 2024

NAME__________Expense Management System cross-site scriptingPlatforms Affected:Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Expense Management System is vulnerable to cross-site scripting, caused by improper validation...

Meks Smart Social Widget Plugin for WordPress cross-site scripting | CVE-2024-0664

January 31, 2024

NAME__________Meks Smart Social Widget Plugin for WordPress cross-site scriptingPlatforms Affected: WordPress Meks Smart Social Widget plugin for WordPress 1.6.3Risk Level:4.4Exploitability:HighConsequences:Cross-Site...

Exclusive Addons for Elementor Plugin for WordPress cross-site scripting | CVE-2024-0824

January 31, 2024

NAME__________Exclusive Addons for Elementor Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Exclusive Addons for Elementor Plugin for WordPress 2.6.8Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting...

Cross Site Scripting

QNAP Photo Station cross-site scripting | CVE-2023-47561

AntiSamy cross-site scripting | CVE-2024-23635

facileManager cross-site scripting | CVE-2024-24571

Discourse cross-site scripting | CVE-2024-23834

HCL BigFix Platform cross-site scripting | CVE-2023-37530

HCL BigFix Platform cross-site scripting | CVE-2024-23553

HCL BigFix Platform cross-site scripting | CVE-2023-37527

HCL BigFix Platform cross-site scripting | CVE-2023-37529

HCL BigFix Platform cross-site scripting | CVE-2023-37531

Product Inventory with Export to Excel cross-site scripting | CVE-2024-24135

Embedthis GoAhead Web Server cross-site scripting |

Online Food Menu cross-site scripting | CVE-2024-24134

Math Game with Leaderboard cross-site scripting | CVE-2024-24136

Group Office cross-site scripting | CVE-2024-23941

UserPro plugin for WordPress cross-site request forgery | CVE-2023-2439

REBUILD cross-site scripting | CVE-2024-1020

Simple Student Result Management System cross-site scripting | CVE-2024-1022

eReserv cross-site scripting | CVE-2024-1026

eReserv cross-site scripting | CVE-2024-1029

Facebook News Feed Like cross-site scripting | CVE-2024-1028

eReserv cross-site scripting | CVE-2024-1030

Expense Management System cross-site scripting | CVE-2024-1031

Meks Smart Social Widget Plugin for WordPress cross-site scripting | CVE-2024-0664

Exclusive Addons for Elementor Plugin for WordPress cross-site scripting | CVE-2024-0824

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

CISA: CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

You may have missed