XSS - CVE CyberSecurity Database News (Page 11)

Feb 10, 2025 XSS

CVE-2024-11831 - Critical XSS Vulnerability in serialize-javascript NPM Library

--- A serious security flaw has been uncovered in the popular serialize-javascript npm package. Tracked as CVE-2024-11831, this vulnerability has wide-reaching consequences for web applications

Feb 9, 2025 XSS WordPress SQL

CVE-2024-13440 - Critical SQL Injection in Super Store Finder WordPress Plugin (Up to v7.) — How It Works, Exploit Details & Code Example

CVE-2024-13440 is a newly identified vulnerability found in the popular Super Store Finder plugin for WordPress. If you’re running any version up to 7.

Feb 8, 2025 XSS WordPress PHP

CVE-2025-0169 - Exploiting Stored Cross-Site Scripting (XSS) in DWT - Directory & Listing WordPress Theme (<= 3.3.4)

The web is full of themes and plugins that make WordPress shine, but sometimes, a simple oversight in code can lead to serious security holes.

Feb 7, 2025 XSS

CVE-2024-10383 - Critical XSS Vulnerability in GitLab Web IDE – Explained with Exploit Example

A serious security flaw has been discovered and tracked as CVE-2024-10383, impacting the popular GitLab code collaboration platform. The issue exists in its gitlab-web-ide-vscode-fork component,

Feb 6, 2025 XSS Exploit PHP

CVE-2025-1082 - Cross-Site Scripting (XSS) Vulnerability in Mindskip xzs-mysql 学之思开源考试系统 3.9. (Exclusive Analysis)

--- Overview A critical security vulnerability, CVE-2025-1082, has been discovered in the open-source examination platform Mindskip xzs-mysql 学之思开源考试系统, version 3.9.. The issue affects the