32 matches found
CVE-2022-24709
creationtimestamp| type| source ---|---|--- 2022-02-24 22:14:51+00:00| seen| https://t.me/cibsecurity/38041...
CVE-2022-24709
@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Use...
CVE-2022-24709 Cross site scripting in @awsui/components-react
@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Use...
CVE-2021-24709
creationtimestamp| type| source ---|---|--- 2021-10-11 14:24:42+00:00| seen| https://t.me/cibsecurity/30326...
CVE-2021-24709
The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings like sizeleaf, flakesleaf, speed which could lead to Stored Cross-Site Scripting issues...
CVE-2021-24709 Weather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting
The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings like sizeleaf, flakesleaf, speed which could lead to Stored Cross-Site Scripting issues...
CVE-2021-24709
CVE-2021-24709 affects the Weather Effect WordPress plugin prior to 1.3.6. The underlying issue is insufficient validation/escaping of certain settings (eg *_size_leaf, *_flakes_leaf, *_speed), leading to Stored Cross-Site Scripting. Public sources (WPScan, PatchStack) reference admin+ and stored...
CVE-2020-24709
Cross Site Scripting XSS vulnerability in Gophish through 0.10.1 via a crafted landing page or email template...
CVE-2020-24709
Cross Site Scripting XSS vulnerability in Gophish through 0.10.1 via a crafted landing page or email template...
CVE-2020-24709
Cross Site Scripting XSS vulnerability in Gophish through 0.10.1 via a crafted landing page or email template...