達煬科技｜WinMatrix3 Web套件 - Reflected Cross-Site Scripting

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/tw/cp-132-10262-2fcb6-1.html
• https://www.twcert.org.tw/newepaper/cp-151-10262-2fcb6-3.html
• https://nvd.nist.gov/vuln/detail/CVE-2025-7920
• https://github.com/advisories/GHSA-v869-2g6q-4fwq
• https://tp2rc.tanet.edu.tw/node/1110
• https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/2178992e-6020-49ce-94f3-8edfd7993d35/
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-30240

Related Vulnerabilities

• PoCCVE-2026-0561: Shield Security <= 21.0.8 - Unauthenticated Reflected XSS
• PoCCVE-2026-28141: NextGEN Gallery <= 4.2.3 - Reflected Cross-Site Scripting
• PoCCVE-2026-41456: Bludit CMS <= 3.20.0 - Cross-Site Scripting
• PoCCVE-2026-57582: GeoNetwork - Reflected Cross-Site Scripting
• PoCCVE-2026-58191: Appium base-driver <=10.6.0 - Reflected Cross-Site Scripting
• PoCCVE-2022-39258: Mailcow Dockerized Swagger UI - Cross-Site Scripting
• PoCCVE-2026-0743: WP Content Permission <= 1.2 - Cross-Site Scripting
• Hepta Platforms｜Heptabase - Stored Cross-Site Scripting
• PoCCVE-2026-49069: WPZOOM Portfolio <= 1.4.21 - Reflected Cross-Site Scripting
• PoCCVE-2026-55087: Etherpad 2.1.0 <= 3.0.0 - Cross-Site Scripting
• PoCcaseaware-xss: CaseAware a360inc - Cross-Site Scripting
• PoCgestsup-xss: GestSup - Cross-Site Scripting
• PoCodoo-xss: Odoo - Cross-Site Scripting