1098 matches found
CVE-2020-19292
A stored cross-site scripting XSS vulnerability in the /question/ask component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted question...
CVE-2020-19293
A stored cross-site scripting XSS vulnerability in the /article/add component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted article...
CVE-2020-19291
A stored cross-site scripting XSS vulnerability in the /weibo/publishdata component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted Weibo...
CVE-2020-19291
Summary: CVE-2020-19291 is a stored cross-site scripting (XSS) vulnerability in the /weibo/publishdata component of JEESNS 1.4.2 that allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted Weibo. Affected product/component: JEESNS 1.4.2; vulnerable path is /we...
CVE-2020-19290
A stored cross-site scripting XSS vulnerability in the /weibo/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Weibo comment section...
CVE-2020-19289
A stored cross-site scripting XSS vulnerability in the /member/picture/album component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the new album tab...
CVE-2020-19288
A stored cross-site scripting XSS vulnerability in the /localhost/u component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a private message...
CVE-2020-19288
Jeesns 1.4.2 has a stored XSS in the /localhost/u component that allows attackers to inject and execute arbitrary scripts via a crafted payload in a private message. Public references confirm the vulnerability and its impact; no specific exploit details or remediation are provided in the connecte...
CVE-2020-19287
CVE-2020-19287 affects Jeesns 1.4.2 with a stored XSS vulnerability in the /group/post component. The issue leverages a crafted payload in the title to execute arbitrary web scripts/HTML, enabling potential credential/session/data exposure depending on context. Public records in multiple feeds (N...
CVE-2020-19287
A stored cross-site scripting XSS vulnerability in the /group/post component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title...
CVE-2020-19285
The CVE-2020-19285 entry describes a stored XSS vulnerability in Jeesns 1.4.2. Affected component: /group/apply, where an attacker can inject arbitrary web scripts via the Name field, enabling script execution in a user’s browser. Root cause is improper input handling in the group/apply payload p...
CVE-2020-19286
A stored cross-site scripting XSS vulnerability in the /question/detail component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the source field of the editor...
CVE-2020-19286
CVE-2020-19286 is a stored XSS in Jeesns 1.4.2. The vulnerability resides in the /question/detail component, exploitable via a crafted payload in the editor’s source field, allowing arbitrary web scripts or HTML execution. The connected Red Hat, CNVD, OSV, and CVE records corroborate a stored XSS...
CVE-2020-19284
A stored cross-site scripting XSS vulnerability in the /group/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the group comments text field...
CVE-2020-19284
A stored XSS vulnerability (CVE-2020-19284) affects Jeesns 1.4.2 in the /group/comment component, allowing an attacker to inject arbitrary scripts/HTML via the group comments text field. The connected sources consistently describe this as a stored XSS in that exact location; the root cause is des...
CVE-2020-19283
Jeesns 1.4.2 is vulnerable to a reflected cross-site scripting (XSS) in the /newVersion component. The issue allows an attacker to cause the victim’s browser to execute arbitrary web scripts or HTML, with potential outcomes including execution of malicious scripts in a session. The related nuclei...
CVE-2020-19283
A reflected cross-site scripting XSS vulnerability in the /newVersion component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML...
CVE-2020-19282
Jeesns 1.4.2 is affected by a reflected cross-site scripting (XSS) vulnerability in the system error message text field. The issue allows an attacker to inject and execute arbitrary web scripts or HTML in a victim’s browser, potentially enabling session hijacking or data exposure. Root cause is a...
CVE-2020-19280
Jeesns 1.4.2 is affected by a cross-site request forgery (CSRF) vulnerability that allows an attacker to escalate privileges and perform sensitive program operations. The available documents consistently describe CSRF as the flaw, but do not provide specific exploit details, affected endpoints, r...