Eren Sen

2 exploits Active since May 2024
CVE-2024-34401 EXPLOITDB MEDIUM text WORKING POC
Savsoft Quiz 6.0 - Stored Cross-Site Scripting via Quiz Name Parameter
Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insert_quiz/ quiz_name parameter.
CVSS 6.1
CVE-2024-58304 EXPLOITDB HIGH text WORKING POC
SPA-CART CMS 1.9.0.3 - Authenticated Stored Cross-Site Scripting via Product Description Parameter
SPA-CART CMS 1.9.0.3 contains a stored cross-site scripting vulnerability in the product description parameter that allows authenticated administrators to inject malicious scripts. Attackers can submit JavaScript payloads through the 'descr' parameter in the product edit form to execute arbitrary code in administrative users' browsers.
CVSS 7.5