Zoo Management System Cross-Site Script Vulnerabilities

PHPGURUKUL Zoo Management System is a zoo management system by Phpgurukul team. A cross-site scripting vulnerability exists in Zoo Management System v1.0, which stems from a lack of checksum filtering of user-supplied data and output in the Add Category feature. The vulnerability can be exploited...

CVE-2022-27627

Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arbitrary script on the logged-in user's web browser...

Cross site scripting

Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary script...

CVE-2022-29513

Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote authenticated attacker with an administrative privilege to execute an arbitrary script...

CVE-2022-27627

Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arbitrary script on the logged-in user's web browser...

CVE-2022-27627

CVE-2022-27627 is a cross-site scripting vulnerability in Cybozu Garoon’s Organization’s Information that can allow a logged-in user to have arbitrary script executed in their browser. Affected versions include Cybozu Garoon 4.10.2 to 5.5.1 (and related ranges listed across sources), with the roo...

PT-2022-18533

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.10.2 through 5.5.1 Description A cross-site scripting issue allows a remote attacker to execute an arbitrary script on the logged-in user's web browser. Recommendations For versions 4.10.2 through 5.5.1, update to a...

PT-2022-19670

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.10.0 through 5.5.1 Description A cross-site scripting issue in the Scheduler component allows a remote authenticated attacker with administrative privileges to execute an arbitrary script. Recommendations For Cybozu...

CVE-2022-27627: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arbitrary script on the logged-in user's web browser...

CVE-2020-19897

A reflected Cross Site Scripting XSS in wuzhicms v4.1.0 allows remote attackers to execute arbitrary web script or HTML via the imgurl parameter...

Cross site scripting

A stored cross-site scripting XSS vulnerability in LightCMS v1.3.11 allows attackers to execute arbitrary web scripts or HTML via uploading a crafted PDF file...

CVE-2022-33113

Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...

CVE-2022-30533

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-30533

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-30533: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-29485

Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to v1.14.2, and v1.15.0 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-29485

Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to v1.14.2, and v1.15.0 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-29485

Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to v1.14.2, and v1.15.0 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-29485: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to v1.14.2, and v1.15.0 allows a remote attacker to inject an arbitrary script via unspecified vectors...

PT-2022-19650

Name of the Vulnerable Software and Affected Versions SHIRASAGI versions 1.0.0 through 1.14.2 SHIRASAGI version 1.15.0 Description A cross-site scripting issue allows a remote attacker to inject an arbitrary script via unspecified vectors. Recommendations For SHIRASAGI versions 1.0.0 through...