XSS
2025
- CVE-2025-9823: Reflected XSS in lead:addLeadTags - Quick Add Sep 3
- CVE-2025-9404: Storage Cross-Site Scripting (XSS) in endpoint pointHIerarchySLTS parameter title Aug 25
- CVE-2025-8510: Reflected Cross-Site Scripting (XSS) in educar_matricula_lst.php via ref_cod_aluno Parameter Aug 3
- CVE-2025-8365: Multiples Cross-Site Scripting (XSS) Stored in endpoint atendidos_cad.php Jul 31
- CVE-2025-8346: Cross-Site Scripting (XSS) Reflected endpoint educar_aluno_lst.php via ref_cod_matricula parameter Jul 31
- CVE-2025-7871: Cross-Site Scripting (XSS) Reflected endpoint conteudos parameter filter[by_description] Jul 20
- CVE-2025-7870: Cross-Site Scripting (XSS) Storage Injection via SVG Upload Jul 20
- CVE-2025-7729: Cross-Site Scripting (XSS) Stored endpoint usersProfiles.shtm parameter userprofilename Jul 17
- CVE-2025-7728: Cross-Site Scripting (XSS) Stored endpoint users.shtm parameter username Jul 17
- CVE-2025-30366: Multiples Stored XSS in personalizacao.php Mar 27
- CVE-2024-57033: Cross-Site Scripting (XSS) Stored in documentos_funcionario.php parameter dados_addInfo Jan 17
- CVE-2024-57030: Cross-Site Scripting (XSS) Stored in documentos_funcionario.php parameter id Jan 17
- CVE-2025-22600: Cross-Site Scripting (XSS) Reflected endpoint configuracao_doacao.php parameter avulso Jan 10
- CVE-2025-22599: Cross-Site Scripting (XSS) Reflected endpoint home.php parameter msg_c Jan 10
- CVE-2025-22139: Cross-Site Scripting (XSS) Reflected endpoint configuracao_geral.php parameter msg Jan 8
- CVE-2025-22132: Cross-Site Scripting (XSS) in File Upload Field Jan 7
2024