References https://www.twcert.org.tw/tw/cp-132-8292-4fd98-1.html https://www.cgu.edu.tw/ic/Subject/Detail/61579?nodeId=12683 https://cve.imfht.com/detail/CVE-2024-12641 https://olis.kmu.edu.tw/index.php/en-gb/notice/79-security/3852-ana20241219a https://ic2.asia.edu.tw/zh_tw/more_announcement/-%E8%B3%87%E8%A8%8A%E7%99%BC%E5%B1%95%E8%99%95-%E5%85%AC%E5%91%8A-%E8%BD%89%E7%9F%A5-ANA%E4%BA%8B%E4%BB%B6%E5%96%AE%E9%80%9A%E7%9F%A5-TACERT-ANA-2024121703122828-%E6%BC%8F%E6%B4%9E%E9%A0%90%E8%AD%A6-%E4%B8%AD%E8%8F%AF%E9%9B%BB%E4%BF%A1-%E6%96%87%E4%BB%B6%E5%82%B3%E8%BC%B8%E7%A8%8B%E5%BC%8F-Reflected-Cross-site-Scripting-to-RCE-95044875 https://www.twcert.org.tw/en/cp-139-8299-42168-2.html https://www.youtube.com/watch?v=rpYYKJrA_yk
Related VulnerabilitiesPoCCVE-2026-0561: Shield Security <= 21.0.8 - Unauthenticated Reflected XSSPoCCVE-2026-28141: NextGEN Gallery <= 4.2.3 - Reflected Cross-Site ScriptingPoCCVE-2026-41456: Bludit CMS <= 3.20.0 - Cross-Site ScriptingPoCCVE-2026-57582: GeoNetwork - Reflected Cross-Site ScriptingPoCCVE-2026-58191: Appium base-driver <=10.6.0 - Reflected Cross-Site ScriptingPoCCVE-2022-39258: Mailcow Dockerized Swagger UI - Cross-Site ScriptingPoCCVE-2026-0743: WP Content Permission <= 1.2 - Cross-Site ScriptingHepta Platforms|Heptabase - Stored Cross-Site ScriptingPoCCVE-2026-49069: WPZOOM Portfolio <= 1.4.21 - Reflected Cross-Site ScriptingPoCCVE-2026-55087: Etherpad 2.1.0 <= 3.0.0 - Cross-Site ScriptingPoCcaseaware-xss: CaseAware a360inc - Cross-Site ScriptingPoCgestsup-xss: GestSup - Cross-Site ScriptingPoCodoo-xss: Odoo - Cross-Site Scripting