XSS - CVE CyberSecurity Database News (Page 33)

Jun 28, 2024 XSS WordPress Exploit PHP

CVE-2024-5730 - Reflected XSS Vulnerability in Pagerank tools WordPress Plugin version 1.1.5

A serious security vulnerability with a CVE-ID of CVE-2024-5730 has been discovered in the Pagerank tools WordPress plugin, specifically in versions up to and including

Jun 27, 2024 XSS API

CVE-2024-4901 - Stored XSS in GitLab’s Commit Notes – Detailed Analysis and Exploitation Guide

On May 30, 2024, the GitLab team disclosed CVE-2024-4901, a severe Stored Cross-Site Scripting (XSS) vulnerability introduced in GitLab Community and Enterprise Editions. This security

Jun 25, 2024 XSS WordPress API

CVE-2024-6307 - WordPress Core Stored XSS Vulnerability via HTML API – What You Need to Know

Last Updated: June 2024 WordPress is the world’s most popular content management system, running about half the web. But when a critical security vulnerability

Jun 18, 2024 XSS WordPress PHP

CVE-2024-3276 - Exploiting Stored XSS in Lightbox & Modal Popup WordPress Plugin – A Deep Dive

The WordPress ecosystem is vast, with plugins extending functions for millions of sites. But with flexibility comes risk. One such recent vulnerability is CVE-2024-3276, found

Jun 13, 2024 XSS

CVE-2024-36236 - Exploiting DOM-based XSS in Adobe Experience Manager ≤6.5.20

In May 2024, security researchers discovered a DOM-based Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM), specifically in versions 6.5.20 and earlier.