Lucene search
+L

356 matches found

OSV
OSV
•added 2022/05/24 5:47 p.m.•22 views

GHSA-6R6H-VHG7-53X7 Cross Site Scripting (XSS) in LavaLite 5.8.0

Cross Site Scripting XSS in LavaLite 5.8.0 via the Address field...

5.4CVSS5.2AI score0.00516EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2022/05/24 5:47 p.m.•30 views

Cross Site Scripting (XSS) in LavaLite 5.8.0

Cross Site Scripting XSS in LavaLite 5.8.0 via the Address field...

5.4CVSS6.2AI score0.00516EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2022/01/20 6:15 p.m.•12 views

CVE-2021-44091

A Cross-Site Scripting XSS vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the 1 fullname, 2 phone, and 3 address parameters...

5.4CVSS6AI score0.00616EPSS
SaveExploits1References3
NVD
NVD
•added 2021/12/20 8:15 p.m.•24 views

CVE-2021-43438

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...

5.4CVSS0.00664EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/20 8:15 p.m.•13 views

CVE-2021-43438

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...

5.4CVSS6.1AI score0.00664EPSS
SaveExploits0References4
OSV
OSV
•added 2021/12/20 8:15 p.m.•21 views

CVE-2021-43438

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...

5.4CVSS6.1AI score0.00664EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/20 8:15 p.m.•28 views

Cross site scripting

Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...

3.5CVSS5.4AI score0.00664EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2021/09/01 10:15 p.m.•14 views

CVE-2020-20349

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...

5.4CVSS6AI score0.00531EPSS
SaveExploits1References1
NVD
NVD
•added 2021/09/01 10:15 p.m.•34 views

CVE-2020-20349

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...

5.4CVSS0.00531EPSS
SaveExploits1References1
Prion
Prion
•added 2021/09/01 10:15 p.m.•26 views

Cross site scripting

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...

3.5CVSS5.2AI score0.00531EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/09/01 9:25 p.m.•45 views

CVE-2020-20349

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...

5.3AI score0.00531EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/01 12:00 a.m.•5 views

CVE-2020-20349: Improper Neutralization of Input During Web Page Generation

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link address field under the background links module...

5.4CVSS5.7AI score0.00531EPSS
SaveExploits1References2
OSV
OSV
•added 2021/08/20 5:15 p.m.•17 views

CVE-2021-34223

Cross-site scripting in urlfilter.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "URL Address" field...

6.1CVSS6.6AI score0.00662EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/20 12:00 a.m.•8 views

CVE-2021-34223: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in urlfilter.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "URL Address" field...

6.1CVSS6.2AI score0.00662EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/08/19 2:39 p.m.•18 views

CVE-2021-28000

A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields...

4.8CVSS5.5AI score0.00932EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/08/19 1:50 p.m.•43 views

CVE-2021-28000

A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields...

5.8AI score0.00932EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/19 12:00 a.m.•6 views

CVE-2021-28000: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields...

4.8CVSS6.3AI score0.00932EPSS
SaveExploits1References2
OSV
OSV
•added 2021/07/23 6:15 p.m.•17 views

CVE-2021-25791

Multiple stored cross site scripting XSS vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields...

5.4CVSS5.6AI score0.02535EPSS
SaveExploits3References3
attackerkb
attackerkb
•added 2021/07/23 6:15 p.m.•9 views

CVE-2021-25791

Multiple stored cross site scripting XSS vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields...

5.4CVSS5.6AI score0.02535EPSS
SaveExploits3References4
CNNVD
CNNVD
•added 2021/07/23 12:00 a.m.•19 views

Online Doctor Appointment System 跨站脚本漏洞

Online Doctor Appointment System is an online doctor appointment system developed using PHP, JavaScript and CSS. A cross-site scripting vulnerability exists in Online Doctor Appointment System 1.0 that allows an authenticated attacker to execute arbitrary web script or HTML via a crafted payload ...

5.4CVSS5.7AI score0.02535EPSS
SaveExploits3References4
Rows per page
Query Builder