CVE-2025-4271 TOTOLINK A720R cstecgi.cgi information disclosure

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to information disclosure. The attac...

CVE-2024-4271 SVGator <= 1.2.6 - Stored XSS via SVG Upload

The SVGator WordPress plugin through 1.2.6 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks...

CVE-2024-4271 SVGator <= 1.2.6 - Stored XSS via SVG Upload

The SVGator WordPress plugin through 1.2.6 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks...

CVE-2023-4271

creationtimestamp| type| source ---|---|--- 2023-10-20 12:41:12+00:00| seen| https://t.me/cibsecurity/72672...

CVE-2023-4271

The Photospace Responsive plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘psresbuttonsize’ parameter in versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2023-4271

CVE-2023-4271 affects the WordPress Photospace Responsive Gallery plugin. It is a Stored Cross-Site Scripting (XSS) vulnerability in the psres_button_size parameter, exploitable in versions up to and including 2.1.1 due to insufficient input sanitization and output escaping. Impact requires authe...

WordPress Photospace Responsive Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Photospace Responsive Type Plugin Vulnerable versions = 2.1.1 Fixed in 2.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4271 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8973e183f828 Credits Marco Wotschka...

CVE-2021-4271

creationtimestamp| type| source ---|---|--- 2022-12-21 22:12:54+00:00| seen| https://t.me/cibsecurity/55069 2025-04-14 17:54:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11670...

CVE-2021-4271 panicsteve w2wiki Markdown index.php toHTML cross site scripting

A vulnerability was found in panicsteve w2wiki. It has been rated as problematic. Affected by this issue is the function toHTML of the file index.php of the component Markdown Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is...

Reflected XSS in Organizations Search

Description Reflected cross-site scripting vulnerabilities arise when data is copied from a request and echoed into the application's immediate response in an unsafe way. An attacker can use the vulnerability to construct a request that, if issued by another application user, will cause JavaScrip...

CVE-2022-4271

creationtimestamp| type| source ---|---|--- 2022-12-02 18:37:05+00:00| seen| https://t.me/cibsecurity/53805...

CVE-2022-4271 Cross-site Scripting (XSS) - Reflected in osticket/osticket

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...

CVE-2022-4271 Cross-site Scripting (XSS) - Reflected in osticket/osticket

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...

CVE-2022-4271 Cross-site Scripting (XSS) - Reflected in osticket/osticket

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...

CVE-2022-4271

osTicket (osticket/osticket)

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (CVE-2019-4271)

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow, IBM Business Process Manager, WebSphere Enterprise Service Bus, and WebSphere Lombardi Edition. Information about a security vulnerability affecting IBM WebSphere Application Server Traditional hav...

Security Bulletin: Client-side HTTP Parameter Pollution in WAS Intelligent Management Admin console

Summary Client-side HTTP Parameter Pollution in WAS Intelligent Management Admin console. TWAS pen testing uncovered an issue with the admin console that allows Client-side HTTP Parameter Pollution. The user must be navigating the affected resources. Client-side HTTP parameter pollution HPP...

SUSE: Security Advisory (SUSE-SU-2018:2752-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM WebSphere Application Server 8.5.x < 8.5.5.16 / 9.0.x < 9.0.5.0 XSS (CVE-2019-4271)

The IBM WebSphere Application Server running on the remote host is version 8.5.0.x prior to 8.5.5.16 or 9.0.x prior to 9.0.5.0. It is, therefore, affected by a cross-site scripting vulnerability in the WebSphere Application Server Admin Console due to improper validation of user-supplied input...

QRadar Community Edition 7.3.1.6 PHP Object Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ PHP object injection vulnerability in QRadar Forensics web application ------------------------------------------------------------------------ Abstract...