EUVD-2025-204345

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the rich text editor component for page and form builders. Attackers can exploit this vulnerability by entering malicious URIs, potentially allowing malicious scripts to execute in...

Cross site scripting

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2021-29818

Summary: CVE-2021-29818 affects IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0. The issue is cross-site scripting in the Web GUI, allowing embedding of arbitrary JavaScript in the UI and potentially credential disclosure within a trusted session. Affected product/version...