25 matches found
CVE-2021-20663
CVE-2021-20663 is a Cross-Site Scripting vulnerability in the Role authority setting screen of Movable Type products. Affected: Movable Type 7 (r.4705 and earlier), Movable Type Advanced 7 (r.4705 and earlier), Movable Type 6.7.5 and earlier, Movable Type Premium 1.39 and earlier, and Movable Typ...
JVN#66542874: Multiple cross-site scripting vulnerabilities in Movable Type
Movable Type provided by Six Apart Ltd. contains multiple cross-site scripting vulnerabilities listed below. Cross-site scripting vulnerability in Role authority setting screen CWE-79 - CVE-2021-20663 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base...
CVE-2019-20663
Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30...
CVE-2019-20663
CVE-2019-20663 is a stored cross-site scripting vulnerability affecting NETGEAR RBR50, RBS50, and RBK50 devices with firmware versions before 2.3.5.30. The issue arises from insufficient input validation in the device’s web interface, permitting injection of client-side script. Impact is describe...
CVE-2018-20663
The CVE-2018-20663 entry describes a Persistent XSS vulnerability in the CUBA Platform Reporting Addon (aka Reports Addon) affecting versions up to 6.10.x, with the flaw exploitable via the name field under Reports > Reports. Evidence across sources (NVD entry and multiple vulnerability tracke...