Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

06:59 UTC· 10m ago

#stored-xss — news, CVEs and analysis · ZeroHour

today 43 visits · 56 views · 7 reads·all time 17K views

Tag

#stored-xss

10 stories this week · 21 this month · 21 in 6 months · mostly security

stories per day · 30 days

Related#xss 11 #apache 5 #cms 4 #poc 4 #wordpress 4 #apache-roller 3 #authorization-bypass 3 #telegram 3 #webapps 3 #chat-export 2 #exploit-db 2 #full-disclosure 2 #h5p 2 #html-export 2 #lumi-education 2 #patch 2 #path-traversal 2 #roller 2

16 stories, newest first · one card per story

Full Disclosure·2h ago

SCHUTZWERK-SA-2024-007: Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education

#xss #stored-xss #h5p

Vulnerability

oss-security·1d ago

CVE-2026-86507: Apache Roller: Stored XSS in comment moderation via comment author URL

#apache #apache-roller #stored-xss

CVE-2026-86507

CERT/CC Vulnerability Notes·1d ago

VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities

#xss #readwise #android

CVE-2026-18311

3 min

Cyber Security News·1d ago high

WordPress Comment2Shell Vulnerability Lets Hackers Take Over Sites Through Comments

#wordpress #comment2shell #stored-xss

6 sources 3 min

Cyber Security News·5d ago

Hackers Can Manipulate Web Cache Keys to Access Restricted Data and Poison Websites

#cache-key-injection #cloudflare #cpdos

2 sources 4 min

GBHackers·8d ago

WordPress 7.1.1 Fixes 11 Security Flaws Including Stored XSS and Path Traversal

#authorization-bypass #cms #patch

3 min

Cyber Security News·8d ago

WordPress Urges Immediate Update After Fixing 11 Security Vulnerabilities

#authorization-bypass #cms #path-traversal

3 min1

Patchstack·9d ago high

WordPress 7.1.1 Maintenance and Security Release

#cms #patch-release #stored-xss

5 min

GBHackers·11d ago high

Telegram Desktop XSS Vulnerability Lets Attackers Steal Entire Chat Histories

#chat-export #html #stored-xss

3 min

Cyber Security News·11d ago

Telegram Desktop Flaw Lets Attackers Steal Chat Messages Through Poisoned HTML Exports

#bots #chat-export #html-export

3 min

Security Affairs·11d ago

Telegram Desktop Flaw Could Turn Old Chat Exports Into Data Theft Traps

#bot-api #expatch #html-export

6 min2

GBHackers·15d ago high

Okta Patches Auth0 and Access Gateway Vulnerabilities Let Attackers Enable XSS, Authentication Bypass and SQL Injection

#access-gateway #ad-ldap-connector #auth0

4 min1

Full Disclosure·18d ago

CVE-2026-52307: Stored XSS in 1CMS v5.6

#1cms #classcms #full-disclosure

CVE-2026-52307

Exploit-DB·25d ago

[webapps] PodcastGenerator 3.2.9 - Stored XSS

#exploit-db #poc #podcastgenerator

Exploit / PoC

1

Exploit-DB·26d ago

[webapps] Bludit CMS - Stored XSS

#bludit #cms #exploit-db

Exploit / PoC

1

Exploit-DB·27d ago

[webapps] CubeCart 6.7.4 - Stored XSS

#cubecart #e-commerce #poc

Exploit / PoC

1