XSS - CVE CyberSecurity Database News (Page 56)

Feb 22, 2024 XSS PHP

CVE-2024-25873 - Exploiting HTML Injection in Enhavo v.13.1 Blockquote Author Field

Enhavo is a modern open-source CMS written in PHP and Symfony, favored for its modular structure and support for custom content types. However, even polished

Feb 22, 2024 XSS Exploit PHP

CVE-2024-25874 - XSS Vulnerability in Enhavo CMS v.13.1’s Create Tag Field – Details & Exploit Guide

The recently discovered CVE-2024-25874 exposes a critical Cross-Site Scripting (XSS) vulnerability in Enhavo CMS v.13.1. Attackers can exploit this flaw in the New/

Feb 22, 2024 XSS Apache

CVE-2024-23349 - XSS Vulnerability in Apache Answer (Summary Field) — Full Analysis and Exploit Example

On February 2024, a significant Cross-Site Scripting (XSS) vulnerability, identified as CVE-2024-23349, was disclosed in the popular Q&A platform Apache Answer (formerly Answer.

Feb 22, 2024 XSS PHP

CVE-2024-26490 - How an XSS Vulnerability in JD Simple Addon Exposes flusity-CMS v2.33 to Attacks

A serious cross-site scripting (XSS) vulnerability—CVE-2024-26490—was discovered in the JD Simple addon of flusity-CMS v2.33. This vulnerability allows attackers to inject and

Feb 22, 2024 XSS Exploit PHP

CVE-2024-26491 - XSS in Flusity-CMS v2.33 "Media Gallery with Description" Module — Deep Dive & Exploit

CVE-2024-26491 describes a Cross-Site Scripting (XSS) vulnerability found in the "Media Gallery with description" module of the Flusity-CMS Addon JD Flusity (version 2.