CVE-2026-18741 Worksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Location and Description Fields

Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...

CVE-2026-18741 Worksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Location and Description Fields

Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...

CVE-2020-18741

Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo."...

CVE-2020-18741

CVE-2020-18741 corresponds to an authorization vulnerability in ThinkSAAS v2.7. The issue allows remote attackers to modify the description of any user’s photo through the parameters photoid[] and photodesc[] in the component index.php?app=photo. The root cause is improper authorization, enabling...

CVE-2017-18741

creationtimestamp| type| source ---|---|--- 2020-04-23 22:07:05+00:00| seen| https://t.me/cibsecurity/11585...

CVE-2017-18741

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6250 before 1.0.4.8, R6300v2 before 1.0.4.8, R6700 before 1.0.1.20, R7000 before 1.0.7.10, R7000P before 1.0.0.58, R6900P before 1.0.0.58, R7100LG before 1.0.0.32, R7900 before 1.0.1.14, R8000 befo...

CVE-2017-18741

CVE-2017-18741 affects multiple NETGEAR routers due to an incorrect configuration of security settings. Affected models and fixed versions per sources: R6250 ≤ 1.0.4.8, R6300v2 ≤ 1.0.4.8, R6700 ≤ 1.0.1.20, R7000 ≤ 1.0.7.10, R7000P ≤ 1.0.0.58, R6900P ≤ 1.0.0.58, R7100LG ≤ 1.0.0.32, R7900 ≤ 1.0.1.1...

CVE-2019-18741

CVE-2019-18741 is rejected/not used; this candidate was withdrawn by its CNA.

CVE-2019-18741

...

CVE-2018-18741

CVE-2018-18741 describes a Cross-Site Scripting (XSS) vulnerability in SEMCMS 3.4, exploitable via the URI admin/SEMCMS_Download.php?lgid=1 during editing. The issue is documented across multiple sources (NVD, CNVD, CVE lists) with the impact characteristics: confidentiality impact LOW, integrity...