16 matches found
07-calito-router (>=0.0.2, <=0.0.4), @adbl/cartridge (>=0.0.0, <=0.0.8) +257 more potentially affected by CVE-2026-33943 via happy-dom (>=15.10.2, <=20.8.7)
happy-dom NPM version =15.10.2, =0.0.2, =0.0.0, =0.1.1, =0.1.0, =18.0.11, =0.5.0, =0.4.2, =0.1.10, =0.3.0, =0.1.0-alpha.1, =0.1.0 - @chialab/sveltekit-utils 0.1.0-alpha.8 - @choiceform/design-js-tokens 0.1.0 - @codai/testing-utils 1.0.0 and more Source cves: CVE-2026-33943 Source advisory:...
07-calito-router (>=0.0.2, <=0.0.4), @adbl/cartridge (>=0.0.0, <=0.0.8) +257 more potentially affected by CVE-2026-33943 via happy-dom (>=15.10.2, <=20.8.7)
happy-dom NPM version =15.10.2, =0.0.2, =0.0.0, =0.1.1, =0.1.0, =18.0.11, =0.5.0, =0.4.2, =0.1.10, =0.3.0, =0.1.0-alpha.1, =0.1.0 - @chialab/sveltekit-utils 0.1.0-alpha.8 - @choiceform/design-js-tokens 0.1.0 - @codai/testing-utils 1.0.0 and more Source cves: CVE-2026-33943 Source advisory:...
EUVD-2021-33943
Malicious code in bioql PyPI...
CVE-2024-33943
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HappyKite Ultimate Under Construction allows Stored XSS.This issue affects Ultimate Under Construction: from n/a through 1.9.3...
CVE-2023-33943
Cross-site scripting XSS vulnerability in the Account module in Liferay Portal 7.4.3.21 through 7.4.3.62, and Liferay DXP 7.4 update 21 through 62 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user's 1 First Name, 2 Middle Name, 3 Last Name, ...
CVE-2024-33943
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HappyKite Ultimate Under Construction allows Stored XSS.This issue affects Ultimate Under Construction: from n/a through 1.9.3...
CVE-2024-33943 WordPress Ultimate Under Construction plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HappyKite Ultimate Under Construction allows Stored XSS.This issue affects Ultimate Under Construction: from n/a through 1.9.3...
CVE-2024-33943 WordPress Ultimate Under Construction plugin <= 1.9.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HappyKite Ultimate Under Construction allows Stored XSS.This issue affects Ultimate Under Construction: from n/a through 1.9.3...
CVE-2024-33943
CVE-2024-33943 is an XSS vulnerability in the Ultimate Under Construction plugin for WordPress, allowing stored cross-site scripting via input during web page generation. The issue affects Ultimate Under Construction versions from n/a up to and including 1.9.3. The connected Red Hat advisory conf...
WordPress Ultimate Under Construction Plugin <= 1.9.3 is vulnerable to Cross Site Scripting (XSS)
Software Ultimate Under Construction Type Plugin Vulnerable versions = 1.9.3 Fixed in 1.9.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33943 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3fb7b9382a8d Credits Cronus Required privilege...
Liferay Portal 7.4.3.21 <= 7.4.3.62 XSS
Cross-site scripting XSS vulnerability in the Account module in Liferay Portal allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user's 1 First Name, 2 Middle Name, 3 Last Name, or 4 Job Title text field. Note that Nessus has not tested for this...
CVE-2023-33943
Cross-site scripting XSS vulnerability in the Account module in Liferay Portal 7.4.3.21 through 7.4.3.62, and Liferay DXP 7.4 update 21 through 62 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user's 1 First Name, 2 Middle Name, 3 Last Name, ...
CVE-2023-33943
CVE-2023-33943 is an XSS vulnerability in the Account module of Liferay Portal (7.4.3.21–7.4.3.62) and Liferay DXP 7.4 update 21–62. The flaw allows remote attackers to inject arbitrary script/HTML via crafted input in user fields: First Name, Middle Name, Last Name, or Job Title. The public desc...
CVE-2022-33943
creationtimestamp| type| source ---|---|--- 2022-07-27 20:36:27+00:00| seen| https://t.me/cibsecurity/47118...
CVE-2022-33943 WordPress BxSlider WP plugin <= 2.0.0 - Authenticated Cross-Site Scripting (XSS) vulnerability
Authenticated contributor or higher user role Cross-Site Scripting XSS vulnerability in Nico Amarilla's BxSlider WP plugin = 2.0.0 at WordPress...