Cross site scripting

Cross-site scripting XSS vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-2235

Name of the Vulnerable Software and Affected Versions Display Suite module versions 7.x-1.x before 7.x-1.7 Display Suite module versions 7.x-2.x before 7.x-2.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the author field...

PT-2013-3385

Name of the Vulnerable Software and Affected Versions Drupal Fresh theme versions prior to 7.x-1.4 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with the administer themes permission to inject arbitrary web script or HTML. Recommendations For versions...

PT-2013-3393

Name of the Vulnerable Software and Affected Versions Simple Corporate theme versions prior to 7.x-1.4 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML...

CVE-2013-1783: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the 3 slide gallery in page--front.tpl.php in the Business theme before 7.x-1.8 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-2380

Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5.x Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For versions 8.5.x, update to a version that includes a fix for this issue...

WordPress Symposium Plugin <= 13.03 - XSS

Because of this vulnerability in invite.php in, the attackers can inject arbitrary web script or HTML via the "u" parameter. Solution Update the plugin...

PT-2013-2403

Name of the Vulnerable Software and Affected Versions IBM iNotes versions 8.5.x Description The issue allows local users to inject arbitrary web script or HTML via a shared mail file. Recommendations For IBM iNotes versions 8.5.x, at the moment, there is no information about a newer version that...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to inject arbitrary web script or HTML via the 1 Number or 2 UpdatePage parameter to WebProd/cgi-bin/AskiaExt.dll...

CVE-2012-5757

Cross-site scripting XSS vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the HMI web application in Siemens WinCC TIA Portal 11 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2013-0672: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the HMI web application in Siemens WinCC TIA Portal 11 allows remote authenticated users to inject arbitrary web script or HTML via unspecified data...

CVE-2013-0328

Cross-site scripting XSS vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2013-2168

Name of the Vulnerable Software and Affected Versions Drupal User Relationships module versions 6.x-1.x before 6.x-1.4 Drupal User Relationships module versions 7.x-1.x before 7.x-1.0-alpha5 Description A cross-site scripting XSS issue exists in the User Relationships module for Drupal, allowing...

CVE-2013-2372

Cross-site scripting XSS vulnerability in the Engine in TIBCO Spotfire Web Player 3.3.x before 3.3.3, 4.0.x before 4.0.3, 4.5.x before 4.5.1, and 5.0.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-2372

CVE-2013-2372 affects TIBCO Spotfire Web Player Engine across multiple lines: 3.3.x before 3.3.3; 4.0.x before 4.0.3; 4.5.x before 4.5.1; and 5.0.x before 5.0.1. It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified ve...

Server: Multiple XSS vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.8 and all prior versions except 4.0.x allow remote attackers to inject arbitrary web script or HTML via the "quota" POST parameter to setquota.php in /core/settings/ajax/ Commits: 2364c79 stable45 Risk: Low Note: Successful...

CVE-2013-0275

Multiple cross-site scripting XSS vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0275

Multiple cross-site scripting XSS vulnerabilities in Ganglia Web before 3.5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...