XSS - CVE CyberSecurity Database News (Page 98)

Jul 20, 2023 XSS Exploit Mobisystems

CVE-2023-38617 - Reflected XSS Vulnerability in Office Suite Premium Version v10.9.1.42602

In June 2023, a security researcher identified a reflected Cross-Site Scripting (XSS) vulnerability in Office Suite Premium Version v10.9.1.42602. This vulnerability, tracked

Jul 19, 2023 XSS API Exploit JSON Web Token Weintek Weincloud

CVE-2023-35134 - Password Reset in Weintek Weincloud v.13.6 with Only a JWT Token

In this post, we’ll break down a real-world vulnerability: CVE-2023-35134. Found in Weintek Weincloud v.13.6, this flaw lets an attacker reset a

Jul 19, 2023 XSS Citrix NetScaler Gateway

CVE-2023-3466 - How Reflected XSS in a Popular Web Application Could Let Hackers Steal Your Data

Web security threats can get tricky, but some vulnerabilities just keep coming back—like Cross-Site Scripting (XSS). In this long read, we’ll break down

Jul 15, 2023 XSS API Exploit PHP Pnp4nagios

CVE-2023-38350 - Exploiting Stored XSS in PNP4Nagios Basket API (A Complete Guide)

CVE-2023-38350 is a critical vulnerability affecting PNP4Nagios up to commit 81ebfc5, including version .6.26. This bug allows attackers to perform stored Cross-site Scripting (XSS)

Jul 12, 2023 XSS WordPress Exploit gdragon GD Mail Queue

CVE-2023-3122 - How a Critical Stored XSS in GD Mail Queue Plugin Threatens WordPress Sites (with Exploit Example)

--- Overview In mid-2023, security researchers uncovered a critical vulnerability in the GD Mail Queue plugin for WordPress, tracked as CVE-2023-3122. This bug, present in