PT-2021-14222

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.0.2 Description: A cross-site scripting issue in the Full Text Search function allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations: For Cybozu...

PT-2021-14221

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.0.2 Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary script via unspecified vectors. Recommendations: For versions 4.0.0 through 5.0.2, update to a version outsid...

PT-2021-14229

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.5.0 Description: A cross-site scripting issue in the E-mail functions of Cybozu Garoon allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations: For...

PT-2021-14208

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.0.2 Description: A cross-site scripting issue in the Scheduler component allows a remote authenticated attacker to inject an arbitrary script. Recommendations: For Cybozu Garoon versions 4.0.0 through...

PT-2021-14247

Name of the Vulnerable Software and Affected Versions: Quiz And Survey Master versions prior to 7.1.14 Description: A cross-site scripting issue allows a remote attacker to inject arbitrary script via unspecified vectors. Recommendations: For versions prior to 7.1.14, update to version 7.1.14 or...

CVE-2021-20792: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script via unspecified vectors...

CVE-2021-20774: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in some functions of E-mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20770: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Message of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20767: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Full Text Search of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20771: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in some functions of E-Mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20769: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20766: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20765: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...

PT-2021-14220

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.0.2 Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary script via unspecified vectors. This could potentially lead to unauthorized actions on the affected system...

CVE-2021-34655

The WP Songbook WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the url parameter found in the /inc/class.ajax.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.11...

Cross site scripting

A cross site scripting XSS vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter...

CVE-2020-20990

CVE-2020-20990 is a cross-site scripting (XSS) vulnerability in Domainmod 4.13 that affects the /segments/edit.php Segment Name parameter. The underlying issue is lack of proper validation of user-supplied data, allowing attackers to inject arbitrary web scripts or HTML. The affected component is...

CVE-2020-20977

A stored cross site scripting XSS vulnerability in index.php/legend/6.html of UK CMS v1.1.10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Comments section...

Maccms cross-site scripting vulnerabilities

Maccms 10 is a PHP-based film and television content management system CMS. Maccms 10 is vulnerable to a cross-site scripting vulnerability, which originates from the ""wd"" parameter in the software's background search function that is not effectively restricted and checked, and can be exploited...

Eyoucms Cross-Site Scripting Vulnerability

Zanzan Network Technology EyouCms EyouCms is a ThinkPHP-based open source content management system CMS from Zanzan Network Technology in China. version v1.4.1 of Eyoucms has a security vulnerability. An attacker can use the vulnerability to execute arbitrary web scripts or HTML...