Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-60654 — Proof-of-concept for CVE-2025-60654: stored cross-site scripting (XSS) in Script Pag ad description field. Demonstrates filter bypass using HTML tags like <img src=x onerror=alert('XSS')>. | Kitploit
Tools/GitHubGitHub/dotadrien/cve-2025-60654
Vulnerability AnalysisWeb Application ExploitationWeb SecurityPapers & ResearchLearning & Education
GitHubdotadrien/cve-2025-60654

CVE-2025-60654

Proof-of-concept for CVE-2025-60654: stored cross-site scripting (XSS) in Script Pag ad description field. Demonstrates filter bypass using HTML tags like <img src=x onerror=alert('XSS')>.

View Repository
78 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-60654 - Stored Cross-Site Scripting (XSS) in Ad Description

ResearchersDotAdrien
Severity7.2 (HIGH) (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)
SoftwareScript Pag

Description

The ad description field is vulnerable to stored Cross-Site Scripting (XSS). Although some security filters are in place, they can be easily bypassed using standard HTML tags. For example, using `` allows an attacker to execute JavaScript in the browser of anyone viewing the specific pages.

Download Tool