heinjame

3 exploits Active since Dec 2025
CVE-2021-47931 EXPLOITDB MEDIUM text WORKING POC
Exponent CMS 2.6 Text Editing Endpoint - Stored Cross-Site Scripting
Exponent CMS 2.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Title and Text Block parameters in the text editing endpoint. Attackers can inject iframe payloads with embedded SVG onload events to execute arbitrary JavaScript. The application also exposes database credentials in responses and lacks brute-force protection on authentication endpoints.
CVSS 6.4
CVE-2021-47733 EXPLOITDB MEDIUM text WORKING POC
CMSimple 5.4 - Stored Cross-Site Scripting via HTML Unicode Encoding Bypass
CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding. Attackers can inject malicious scripts by encoding payloads like ')-alert(1)// and execute arbitrary JavaScript when victims interact with delete buttons.
CVSS 6.1
EIP-2026-105491 EXPLOITDB python WORKING POC
Bitrix24 - Remote Code Execution (RCE) (Authenticated)