#reflected-xss

0 stories this week · 0 this month · 3 in 6 months · mostly security

Stories per day · 30 days

3 stories, newest first · one card per story

Apache Roller 6.1.5 reflected XSS targets frontpage-theme visitors through a crafted directory parameter.

Apache Syncope Console and Enduser UIs suffer unauthenticated reflected XSS via notification messages, affecting versions 4.0.4 through 4.1.2.

Exploit-DBSep 2, 2026

A reflected cross-site scripting flaw in Bludit CMS 3.20.0 is documented with a public proof-of-concept exploit on Exploit-DB.

Stories tagged #reflected-xss