XSS - CVE CyberSecurity Database News (Page 30)

Sep 27, 2024 XSS Exploit PHP

CVE-2024-46453 - Exploiting XSS in **iq3xcite** `/test/` Endpoint (Versions 2.31–3.05)

A new security issue, CVE-2024-46453, has been found in the web application framework iq3xcite versions 2.31 to 3.05. This vulnerability allows attackers to

CVE-2024-47068 - Rollup’s DOM Clobbering Vulnerability Explained With Example and Exploit

Sep 23, 2024 XSS Exploit

CVE-2024-47068 - Rollup’s DOM Clobbering Vulnerability Explained With Example and Exploit

Rollup is a popular module bundler widely used in building JavaScript applications. In 2024, security researchers identified a major vulnerability—now tracked as CVE-2024-47068—impacting

CVE-2024-9077 - Remote XSS in dingfangzu scripts/order.js (Order Checkout) - Full Exploit Details

Sep 22, 2024 XSS API Exploit

CVE-2024-9077 - Remote XSS in dingfangzu scripts/order.js (Order Checkout) - Full Exploit Details

*Published: June 2024* Overview A vulnerability, catalogued as CVE-2024-9077, was discovered in the dingfangzu project up to commit 29d67d9044f6f93378e6eb6ff92272217ff7225c. This flaw is located in the

CVE-2024-8907 - XSS in Google Chrome for Android’s Omnibox – Exploit Details and Analysis

Sep 17, 2024 XSS Exploit Google Chrome

CVE-2024-8907 - XSS in Google Chrome for Android’s Omnibox – Exploit Details and Analysis

CVE-2024-8907 is a medium-severity security bug that was found in Google Chrome for Android. The issue lies in the Omnibox—the address bar at the

Sep 16, 2024 XSS

CVE-2024-45801 - DOMPurify XSS Bypass via Improper Nesting and Prototype Pollution

DOMPurify is a popular JavaScript library designed to sanitize HTML, MathML, and SVG. It protects web applications from the dangerous threat of Cross-Site Scripting (XSS)