Exploits - exploit.company

Explore Vulnerabilities

Explore all Exploits:

by:

Eren Sen

vendor:

SPA-Cart

SPA-CART CMS – Stored XSS

A Stored Cross Site Scripting (XSS) vulnerability was discovered in SPA-CART CMS version 1.9.0.3. By injecting malicious code into the 'descr' parameter via a POST request, an attacker can execute arbitrary scripts in the context of a user's browser.

Explore Vulnerabilities

Explore all Exploits:

SPA-CART CMS – Stored XSS

Recent Exploits:

RDPGuard 9.9.9 – Privilege Escalation

YesWiki Unauthenticated Path Traversal

ABB Cylon Aspect 3.08.02 Stored Cross-Site Scripting Vulnerability

Apache ActiveMQ 6.1.6 – Denial of Service (DOS)

GeoVision GV-ASManager 6.1.1.0 – CSRF

ABB Cylon FLXeon 9.3.4 WebSocket Command Spawning Vulnerability

GestioIP 3.5.7 – Stored Cross-Site Scripting Vulnerability

Cacti 1.2.26 – Remote Code Execution (RCE) (Authenticated)

Exclusive Addons for Elementor ≤ 2.6.9 – Authenticated Stored Cross-Site Scripting (XSS)

Kentico Xperience 13.0.178 – Cross Site Scripting (XSS)