Cybersecurity articles tagged #XSS on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/bdthemes-wordpress-plugin-supply-chain-attack-creates-rogue-adminshttps://runtimerebel.com/blog/bdthemes-wordpress-plugin-supply-chain-attack-creates-rogue-adminsA supply chain attack on BdThemes WordPress plugins exploited an XSS vulnerability, creating stealthy rogue admin accounts and webshells.Tue, 11 Aug 2026 08:45:01 GMTWordPressSupply Chain AttackXSSWebshellBdThemeshttps://runtimerebel.com/blog/cve-2026-64638-wordpress-pre-auth-xss-leads-to-php-rcehttps://runtimerebel.com/blog/cve-2026-64638-wordpress-pre-auth-xss-leads-to-php-rceA pre-authentication reflected XSS (CVE-2026-64638) in WordPress can be chained for PHP code execution. Patch immediately.Fri, 07 Aug 2026 16:42:22 GMTWordPressXSSRCEWeb SecurityCVE-2026-64638https://runtimerebel.com/blog/zimbra-classic-web-client-xss-critical-flaw-under-active-exploithttps://runtimerebel.com/blog/zimbra-classic-web-client-xss-critical-flaw-under-active-exploitA critical XSS vulnerability in Zimbra Classic Web Client is under active exploitation, allowing credential theft and session hijacking.Fri, 10 Jul 2026 14:31:43 GMTZimbraXSSClassic Web ClientZimbra Collaboration SuiteActive Exploitationhttps://runtimerebel.com/blog/wordpress-sites-targeted-via-kirki-and-burst-statistics-vulnerabilitieshttps://runtimerebel.com/blog/wordpress-sites-targeted-via-kirki-and-burst-statistics-vulnerabilitiesAttackers are exploiting unauthenticated stored XSS in Kirki and Burst Statistics plugins to achieve privilege escalation and website takeover.Wed, 03 Jun 2026 13:48:48 GMTCVE-2024-11884CVE-2024-11046WordPressKirkiBurst StatisticsXSSPrivilege Escalationhttps://runtimerebel.com/blog/cve-2021-22291-abb-eibport-v3-3-9-2-session-hijacking-vulnerabilityhttps://runtimerebel.com/blog/cve-2021-22291-abb-eibport-v3-3-9-2-session-hijacking-vulnerabilityABB EIBPORT V3 devices are vulnerable to CVE-2021-22291 (XSS/session hijacking), allowing unauthenticated access and configuration changes. Patch immediately.Thu, 28 May 2026 17:27:09 GMTCVE-2021-22291ABB EIBPORTXSSSession HijackingICSBuilding AutomationCritical Manufacturinghttps://runtimerebel.com/blog/cve-2024-50498-cisa-orders-patch-for-exploited-cpanel-plugin-flawhttps://runtimerebel.com/blog/cve-2024-50498-cisa-orders-patch-for-exploited-cpanel-plugin-flawCISA mandates federal agencies patch CVE-2024-50498, an actively exploited LiteSpeed cPanel plugin vulnerability, to prevent unauthorized account access.Wed, 27 May 2026 13:21:58 GMTCVE-2024-50498cPanelLiteSpeedCISA KEVXSShttps://runtimerebel.com/blog/cve-2026-4293-kieback-peter-ddc-xss-mitigate-building-controller-riskshttps://runtimerebel.com/blog/cve-2026-4293-kieback-peter-ddc-xss-mitigate-building-controller-risksCISA warns of CVE-2026-4293, a Cross-site Scripting vulnerability in Kieback & Peter DDC Building Controllers.Tue, 19 May 2026 20:43:11 GMTKieback PeterDDC Building ControllersCVE-2026-4293XSSCross Site ScriptingICSOT SecurityBuilding AutomationCWE-79https://runtimerebel.com/blog/cve-2026-42897-microsoft-exchange-owa-xss-zero-day-under-attackhttps://runtimerebel.com/blog/cve-2026-42897-microsoft-exchange-owa-xss-zero-day-under-attackActive Zero-Day XSS vulnerability, CVE-2026-42897, impacts Microsoft Exchange OWA, allowing mailbox compromise. No patch available.Tue, 19 May 2026 00:57:54 GMTCVE-2026-42897Microsoft ExchangeOWAXSSZero-DayOutlook Web Accesshttps://runtimerebel.com/blog/cve-2026-42897-microsoft-exchange-xss-under-active-exploitationhttps://runtimerebel.com/blog/cve-2026-42897-microsoft-exchange-xss-under-active-exploitationCISA adds CVE-2026-42897, a Microsoft Exchange Server Cross-Site Scripting vulnerability, to KEV Catalog due to active exploitation. Immediate patching advised.Fri, 15 May 2026 20:32:11 GMTCVE-2026-42897Microsoft Exchange ServerCross Site ScriptingXSSCISA KEVActive Exploitationhttps://runtimerebel.com/blog/cve-2026-42897-how-attackers-exploit-microsoft-exchange-serverhttps://runtimerebel.com/blog/cve-2026-42897-how-attackers-exploit-microsoft-exchange-serverMicrosoft warns of active exploitation of CVE-2026-42897, a critical spoofing and XSS vulnerability in on-premise Exchange Server triggered via email.Fri, 15 May 2026 09:11:29 GMTCVE-2026-42897Microsoft Exchange ServerXSSSpoofingZero-Dayhttps://runtimerebel.com/blog/cve-2023-29489-how-attackers-exploit-cpanel-xss-for-auth-bypasshttps://runtimerebel.com/blog/cve-2023-29489-how-attackers-exploit-cpanel-xss-for-auth-bypassA critical authentication bypass in cPanel via CVE-2023-29489 is under active exploitation. Discover technical details and essential mitigation steps.Mon, 04 May 2026 20:36:54 GMTcPanelCVE-2023-29489Authentication BypassXSSWeb Hostinghttps://runtimerebel.com/blog/zimbra-xss-attacks-over-10000-servers-vulnerable-patch-nowhttps://runtimerebel.com/blog/zimbra-xss-attacks-over-10000-servers-vulnerable-patch-nowOngoing cross-site scripting (XSS) attacks exploit a flaw in Zimbra Collaboration Suite (ZCS), leaving over 10,000 online servers vulnerable.Fri, 24 Apr 2026 16:28:18 GMTZimbraZCSXSSCross Site ScriptingEmail ServerVulnerabilityhttps://runtimerebel.com/blog/claude-chrome-extension-zero-click-prompt-injection-vulnerabilityhttps://runtimerebel.com/blog/claude-chrome-extension-zero-click-prompt-injection-vulnerabilityA critical flaw in Anthropic's Claude Chrome extension allowed websites to silently inject malicious prompts using zero-click XSS techniques.Thu, 26 Mar 2026 16:31:26 GMTAnthropicClaudePrompt InjectionBrowser ExtensionXSShttps://runtimerebel.com/blog/cve-2025-13902-patching-schneider-electric-modicon-controllershttps://runtimerebel.com/blog/cve-2025-13902-patching-schneider-electric-modicon-controllersSchneider Electric Modicon M241 and M251 controllers face XSS risks via CVE-2025-13902. Learn how to patch firmware and secure industrial control networks.Thu, 19 Mar 2026 16:26:40 GMTCVE-2025-13902Schneider ElectricModiconICSXSShttps://runtimerebel.com/blog/cve-2025-66376-zcs-cross-site-scripting-actively-exploitedhttps://runtimerebel.com/blog/cve-2025-66376-zcs-cross-site-scripting-actively-exploitedCISA adds CVE-2025-66376, a Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting vulnerability, to its KEV Catalog due to active exploitation.Wed, 18 Mar 2026 20:18:10 GMTCVE-2025-66376Synacor Zimbra Collaboration SuiteZCSXSSKnown Exploited VulnerabilitiesCISA KEVhttps://runtimerebel.com/blog/cve-2024-4510-zimbra-collaboration-suite-xss-exploitation-guidehttps://runtimerebel.com/blog/cve-2024-4510-zimbra-collaboration-suite-xss-exploitation-guideCISA adds CVE-2024-4510 to the KEV catalog following active exploitation of a Zimbra Collaboration Suite XSS vulnerability. Patch ZCS version 9.0.0 today.Wed, 18 Mar 2026 20:16:14 GMTCVE-2024-4510ZimbraXSSCISA KEVMail Securityhttps://runtimerebel.com/blog/exploitation-of-svg-based-xss-in-roundcube-webmail-instanceshttps://runtimerebel.com/blog/exploitation-of-svg-based-xss-in-roundcube-webmail-instancesTechnical analysis of a cross-site scripting (XSS) vulnerability in RoundCube Webmail triggered by improper sanitization of SVG animate elements.Mon, 23 Feb 2026 12:23:45 GMTRoundcubeXSSSVGWebmail Securityhttps://runtimerebel.com/blog/exploitation-of-roundcube-webmail-cross-site-scripting-vulnerabilitieshttps://runtimerebel.com/blog/exploitation-of-roundcube-webmail-cross-site-scripting-vulnerabilitiesCISA has added two Roundcube Webmail vulnerabilities to its Known Exploited Vulnerabilities catalog, signaling active exploitation of legacy flaws in webmail…Mon, 23 Feb 2026 12:20:44 GMTRoundcubeXSSCISAKEVWebmail