323 matches found
PT-2020-9708
Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.21.3 Description The issue affects the Project Documentation feature, specifically the proj doc edit page.php file, allowing for a stored cross-site scripting XSS attack. This occurs when an attachment with a...
CVE-2019-17599
The quiz-master-next aka Quiz And Survey Master plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter and/or the quizid parameter. The component is:...
CVE-2019-17599
The quiz-master-next aka Quiz And Survey Master plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter and/or the quizid parameter. The component is:...
CVE-2019-17599
The CVE-2019-17599 entry affects the WordPress plugin Quiz Master Next (Quiz And Survey Master) up to version 6.3.5. The vulnerability is a reflected XSS in the admin/quiz-options-page.php component that can be triggered via parameters such as from, till, or quiz_id when an administrator clicks a...
CVE-2019-17599: Improper Neutralization of Input During Web Page Generation
The quiz-master-next aka Quiz And Survey Master plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter and/or the quizid parameter. The component is:...
PT-2019-15220
Name of the Vulnerable Software and Affected Versions Quiz And Survey Master plugin versions prior to 6.3.5 Description The issue allows an attacker to execute arbitrary HTML and JavaScript code. This can occur via the from or till parameter, and/or the quiz id parameter, in the...
CVE-2019-17072
The new-contact-form-widget aka Contact Form Widget - Contact Query, Form Maker plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php...
PT-2019-14938
Name of the Vulnerable Software and Affected Versions new-contact-form-widget plugin version 1.0.9 Description The issue is related to SQL Injection, which occurs via the all-query-page.php file. Recommendations For version 1.0.9, update to a newer version that contains a fix for this issue...
CVE-2019-17072: Improper Neutralization of Special Elements used in an SQL Command
The new-contact-form-widget aka Contact Form Widget - Contact Query, Form Maker plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php...
PT-2019-13972
Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.21.2 Description The issue concerns a stored cross-site scripting XSS vulnerability in the Timeline feature of the my view page.php file. This vulnerability allows for the execution of arbitrary code, provided that...
PT-2019-11173
Name of the Vulnerable Software and Affected Versions: MantisBT versions 1.3.14 and earlier, 2.0.0 Description: An issue was discovered in MantisBT where any user with REPORTER access or above can view any private issue's details, including summary, description, steps to reproduce, and additional...
PT-2018-15427
Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP, where the "admin/page.php?rec=edit" endpoint has a cross-site scripting XSS issue via the page name parameter. Recommendations For DouPHP version 1.5 20181221,...
CVE-2018-20557: Improper Neutralization of Input During Web Page Generation
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/page.php?rec=edit has XSS via the pagename parameter...
CVE-2018-17783
A cross-site scripting XSS vulnerability in the Edit Filter page managefilteredit page.php in MantisBT 2.1.0 through 2.17.1 allows remote attackers if access rights permit it to inject arbitrary code if CSP settings permit it through a crafted project name...
CVE-2018-17783: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the Edit Filter page managefilteredit page.php in MantisBT 2.1.0 through 2.17.1 allows remote attackers if access rights permit it to inject arbitrary code if CSP settings permit it through a crafted project name...
PT-2018-13517
Name of the Vulnerable Software and Affected Versions MantisBT Source Integration plugin versions prior to 1.5.9 MantisBT Source Integration plugin versions 2.x prior to 2.1.5 Description A cross-site scripting XSS issue in the Manage Repository and Changesets List pages allows execution of...
CVE-2018-1000638
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
CVE-2018-1000638
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
CVE-2018-1000638: Improper Neutralization of Input During Web Page Generation
MiniCMS version 1.1 contains a Cross Site Scripting XSS vulnerability in http://example.org/mc-admin/page.php?date=payload that can result in code injection...
PT-2018-9491
Name of the Vulnerable Software and Affected Versions MiniCMS version 1.1 Description The issue is related to a Cross Site Scripting XSS vulnerability. It affects the "http://example.org/mc-admin/page.php?date=payload" endpoint, where payload can be used for code injection. Recommendations For...