Lucene search
+L

565 matches found

CNVD
CNVD
added 2022/01/07 12:0 a.m.27 views

Bludit Cross-Site Scripting Vulnerability (CNVD-2022-02493)

Bludit is an open source lightweight blog content management system CMS. cross-site scripting vulnerability exists in Bludit 3.13.1 and prior versions, which stems from a lack of effective filtering and escaping in the About plugin of the software's login panel, leading to a stored cross-site...

5.4CVSS1.5AI score0.01438EPSS
SaveExploits0
NVD
NVD
added 2022/01/06 4:15 p.m.22 views

CVE-2021-45745

A Stored Cross Site Scripting XSS vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel...

5.4CVSS0.01438EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/06 4:15 p.m.22 views

CVE-2021-45745

A Stored Cross Site Scripting XSS vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel...

5.4CVSS5.7AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/01/06 4:15 p.m.4 views

CVE-2021-45745

A Stored Cross Site Scripting XSS vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel...

5.4CVSS5.8AI score0.01438EPSS
SaveExploits0References3
Prion
Prion
added 2022/01/06 4:15 p.m.22 views

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel...

3.5CVSS5.3AI score0.01438EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/01/06 3:45 p.m.24 views

CVE-2021-45745

A Stored Cross Site Scripting XSS vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel...

5.5AI score0.01438EPSS
SaveExploits0References2
CVE
CVE
added 2022/01/06 3:45 p.m.54 views

CVE-2021-45745

Bludit 3.13.1 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the About Plugin within the login panel. The root cause is lack of input filtering/escaping in the About plugin, enabling an attacker to store malicious scripts that could be executed in the victim’s browser. The CV...

5.4CVSS5.2AI score0.01438EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/01/06 12:0 a.m.7 views

Bludit 跨站脚本漏洞

Bludit is an open source lightweight blog content management system CMS. cross-site scripting vulnerability exists in Bludit 3.13.1 and prior versions, which stems from a lack of effective filtering and escaping in the About plugin of the software's login panel, leading to a stored cross-site...

5.4CVSS5.2AI score0.01438EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
added 2021/12/26 6:2 a.m.14 views

overseaspropertylocator.co.uk Cross Site Scripting vulnerability OBB-2311020

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
added 2021/12/16 7:15 p.m.6 views

CVE-2021-44317

In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...

5.4CVSS5.8AI score0.00544EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/16 7:15 p.m.2 views

CVE-2021-44317

In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...

5.4CVSS6AI score0.00544EPSS
SaveExploits1References3
Prion
Prion
added 2021/12/16 7:15 p.m.24 views

Cross site scripting

In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...

3.5CVSS5.4AI score0.00544EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/12/16 3:15 a.m.2 views

DEBIAN-CVE-2021-45085

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list...

6.1CVSS6AI score0.01485EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/16 3:15 a.m.22 views

CVE-2021-45085

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list...

6.1CVSS5.8AI score
SaveExploits0References4
OSV
OSV
added 2021/12/16 3:15 a.m.9 views

UBUNTU-CVE-2021-45085

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list...

6.1CVSS5.8AI score0.01485EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2021/12/16 3:15 a.m.29 views

CVE-2021-45085

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list...

6.1CVSS6.4AI score0.01485EPSS
SaveExploits1References3
CVE
CVE
added 2021/12/16 2:19 a.m.120 views

CVE-2021-45085

CVE-2021-45085 affects GNOME Web (Epiphany) where XSS is possible via an about: page. The issue occurs in Epiphany builds prior to 40.4 and 41.x prior to 41.1 when a user visits an XSS payload page, e.g., ephy-about:overview, which can land a page on the Most Visited list. Public details in conne...

6.1CVSS5.8AI score0.01485EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
added 2021/12/16 2:19 a.m.50 views

CVE-2021-45085

XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list...

6.1CVSS6AI score0.01485EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/12/16 12:0 a.m.4 views

Bus Pass Management System 跨站脚本漏洞

Bus Pass Management System is a bus pass management system. v1.0 of Bus Pass Management System is vulnerable to a cross-site scripting vulnerability that stems from the lack of data validation filtering of user-supplied data and output in the parameters pagedes and About Us. An attacker could...

5.4CVSS5.6AI score0.00544EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/12/16 12:0 a.m.11 views

PT-2021-24080 · Unknown · Bus Pass Management System

Name of the Vulnerable Software and Affected Versions: Bus Pass Management System version 1.0 Description: The issue is related to a Stored Cross-site scripting vulnerability. Parameters pagedes and About Us are affected. Recommendations: For Bus Pass Management System version 1.0, consider...

5.4CVSS5.2AI score0.00544EPSS
SaveExploits1References5
Rows per page
Query Builder