Red Team Stored XSS SVG phishing-companion tool with the ability to serve a malicious login page, or clone an html page and implement custom javascript. It then generates a relevant SVG.
-
Updated
Mar 31, 2023 - Python
#
stored-xss-exploit
Here are 6 public repositories matching this topic...
MISP <= 2.5.27 - Stored Cross-Site Scripting via Workflow Engine (doT.js Template Injection).
xss cybersecurity xss-vulnerability pentesting misp cve pentest xss-exploitation xss-attacks 0day xss-exploit exfiltrate-data stored-xss-exploit stored-xss 0dayexploit 0day-exploit csp-bypass cve-2025 cve-2025-67906 misp-exploit
-
Updated
Mar 27, 2026 - Python
Post authenticated stored-xss in XenForo versions ≤ 2.2.7
-
Updated
Oct 29, 2021
Three stored cross-site scripting (XSS) in Pandora FMS 7.0 NG 747 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page.
pandorafms pandorafms-xss pandorafms-exploit xss-filter-bypass pandorafms-ng747-xss stored-xss-exploit
-
Updated
Jul 20, 2020
XSS via file upload (pdf)
-
Updated
Oct 20, 2025 - Python
Add this topic to your repo
To associate your repository with the stored-xss-exploit topic, visit your repo's landing page and select "manage topics."