4.8

CVSS4.0

CVE-2026-7013 - MaxSite CMS mail_send Plugin cross site scripting

A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is some unknown functionality of the component mail_send Plugin. The manipulation of the argument f_subject/f_files/f_from leads to cross site scripting. The attack can be initiated remotely. The exploit h…

πŸ“… Published: April 26, 2026, 2 a.m. πŸ”„ Last Modified: April 27, 2026, 6:41 p.m.

4.8

CVSS4.0

CVE-2026-7012 - MaxSite CMS Redirect Plugin cross site scripting

A vulnerability was detected in MaxSite CMS up to 109.3. This affects an unknown part of the component Redirect Plugin. The manipulation of the argument f_all/f_all404 results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. Upgrading to versi…

πŸ“… Published: April 26, 2026, 1:15 a.m. πŸ”„ Last Modified: April 27, 2026, 5:04 p.m.

4.8

CVSS4.0

CVE-2026-7011 - MaxSite CMS Antispam Plugin plugin_antispam cross site scripting

A weakness has been identified in MaxSite CMS up to 109.3. Affected by this vulnerability is an unknown functionality of the file /admin/plugin_antispam of the component Antispam Plugin. Executing a manipulation of the argument f_logging_file can lead to cross site scripting. It is possible to laun…

πŸ“… Published: April 26, 2026, 12:30 a.m. πŸ”„ Last Modified: April 27, 2026, 1:50 p.m.

6.9

CVSS4.0

CVE-2026-7002 - KLiK SocialMediaWebsite Private Message get_message_ajax.php sql injection

A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/get_message_ajax.php of the component Private Message Handler. Executing a manipulation of the argument c_id can lead to sql injection. It is possible to launch the a…

πŸ“… Published: April 25, 2026, 9:30 p.m. πŸ”„ Last Modified: April 27, 2026, 1:33 p.m.

4.8

CVSS4.0

CVE-2026-7001 - Datacom DM4100 Ethernet Configuration cross site scripting

A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709. This affects an unknown part of the component Ethernet Configuration Page. Performing a manipulation of the argument Name results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public a…

πŸ“… Published: April 25, 2026, 9:15 p.m. πŸ”„ Last Modified: April 27, 2026, 1:29 p.m.

4.8

CVSS4.0

CVE-2026-7000 - Datacom DM4100 VLAN Page cross site scripting

A vulnerability has been found in Datacom DM4100 1.3.6.1.4.1.3709. Affected by this issue is some unknown functionality of the component VLAN Page. Such manipulation of the argument VLAN Name leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to t…

πŸ“… Published: April 25, 2026, 9 p.m. πŸ”„ Last Modified: April 27, 2026, 12:39 p.m.

4.8

CVSS4.0

CVE-2026-6999 - BIVOCOM TR321 Wireless Setting cross site scripting

A flaw has been found in BIVOCOM TR321 21.1.1.50. Affected by this vulnerability is an unknown functionality of the component Wireless Setting. This manipulation of the argument Network Name SSID causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been pu…

πŸ“… Published: April 25, 2026, 8:45 p.m. πŸ”„ Last Modified: April 27, 2026, 5:08 p.m.

4.8

CVSS4.0

CVE-2026-6998 - BDCOM P3310D New RMON Statistics cross site scripting

A vulnerability was detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. Affected is an unknown function of the component New RMON Statistics Page. The manipulation of the argument Owner results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used. …

πŸ“… Published: April 25, 2026, 8:15 p.m. πŸ”„ Last Modified: April 27, 2026, 1:49 p.m.

4.8

CVSS4.0

CVE-2026-6997 - BDCOM P3310D New RMON History cross site scripting

A security vulnerability has been detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This impacts an unknown function of the component New RMON History Page. The manipulation of the argument Owner leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been di…

πŸ“… Published: April 25, 2026, 8 p.m. πŸ”„ Last Modified: April 27, 2026, 1:34 p.m.

4.8

CVSS4.0

CVE-2026-6996 - BDCOM P3310D rmon event Tab cross site scripting

A weakness has been identified in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This affects an unknown function of the component rmon event Tab. Executing a manipulation of the argument Description can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available…

πŸ“… Published: April 25, 2026, 7:45 p.m. πŸ”„ Last Modified: April 27, 2026, 1:28 p.m.
Total resulsts: 347008
Page 46 of 34,701
Β« previous page Β» next page
Filters