Vulnerabilities
Is Your Crafty Controller Audit Log Vulnerable to Stored XSS?
A critical output escaping flaw in Crafty Controller allows remote attackers to inject scripts via HTTP headers, exposing all versions up to 4.10.8.
Stored XSS
Everything Honeypot Daily has reported about Stored XSS: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Does GYM One <1.4.1 Risk Admin Privilege Escalation via Stored XSS?
A high-severity flaw in GYM One allows attackers to inject scripts that run with administrator privileges.
Vulnerabilities
How Does Critical Stored XSS in AEM 6.5 Threaten User Sessions and Privileges?
Adobe Experience Manager versions up to 6.5.25 contain a critical stored XSS flaw that could allow attackers to hijack user sessions and elevate privileges.
Vulnerabilities
Does Your Adobe Commerce Instance Hold a Critical Stored XSS Flaw?
A severe script injection flaw in older Adobe Commerce and Magento versions allows attackers to hijack sessions via stored malicious code.