1346 matches found
CVE-2024-49636
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woracal Agile Video Player Lite agile-video-player allows Reflected XSS.This issue affects Agile Video Player Lite: from n/a through = 1.0...
CVE-2024-49636 WordPress Agile Video Player Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woracal Agile Video Player Lite agile-video-player allows Reflected XSS.This issue affects Agile Video Player Lite: from n/a through = 1.0...
CVE-2024-49636
CVE-2024-49636 concerns Agile Video Player Lite (WordPress plugin) with a Reflected XSS in versions
CVE-2024-49636 WordPress Agile Video Player Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Prashant Mavinkurve Agile Video Player Lite allows Reflected XSS.This issue affects Agile Video Player Lite: from n/a through 1.0...
WordPress plugin Agile Video Player Lite 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-50578
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...
CVE-2024-50578
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...
CVE-2024-50578
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...
CVE-2024-50578
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...
CVE-2024-50578
Summary: CVE-2024-50578 affects JetBrains YouTrack prior to 2024.3.47707, where a stored XSS vulnerability exists in the Agile Boards page triggered by a sprint value. Impact (as described): cross-site scripting could be exploited via the Agile Boards sprint field, enabling attacker-controlled co...
PT-2024-7635 · Jetbrains · Youtrack
Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.47707 Description: The issue is related to a stored XSS vulnerability in the Agile Boards page of JetBrains YouTrack. This vulnerability can be exploited by an attacker to conduct cross-site scripti...
WordPress Agile Video Player Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Agile Video Player Lite versions = 1.0...
WordPress Agile Video Player Lite Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
Software Agile Video Player Lite Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49636 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 267bc8c567b6 Credits João Pedro S Alcântara Kinor...
Malicious code in agile_cli (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Secure Your Containerized Environments with Qualys Containerized Scanner Appliance (QCSA)
IT has undergone a series of significant shifts over the years, from physical infrastructure to virtual, and how infrastructure was managed and maintained. This shift led IT through the digital transformation era, introducing various types of clouds and “As-a-Service” models. Although...
CVE-2024-37828
A stored cross-site scripting XSS in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast Message module...
VERMEG Agile Reporter Security Breach
VERMEG Agile Reporter is a hybrid of pre-packaged modules from VERMEG, Inc. A security vulnerability exists in VERMEG Agile Reporter version v23.2.1, which stems from the presence of stored cross-site scripting XSS that allows an attacker to inject a crafted payload to execute arbitrary web scrip...
CVE-2024-37828
A stored cross-site scripting XSS in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast Message module...
CVE-2024-37828
CVE-2024-37828 describes a stored cross-site scripting (XSS) vulnerability in Vermeg Agile Reporter v23.2.1. The issue allows an attacker to inject crafted scripts/HTML into the Message field of the Set Broadcast Message module, potentially enabling script execution in a victim’s browser and mani...
CVE-2024-37828
A stored cross-site scripting XSS in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field under the Set Broadcast Message module...