CVE-2023-29637: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Qbian61 forum-java, allows attackers to inject arbitrary web script or HTML via editing the article content in the "article editor" page...

SUSE CVE-2013-4138

Cross-site scripting XSS vulnerability in the Hatch theme 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with the "Administer content," "Create new article," or "Edit any article type content" permission to inject arbitrary web script or HTML via unspecified vectors...

Pomash 跨站脚本漏洞

Pomash is a lightweight blogging system by the individual developer of JmPotato. Pomash suffers from a cross-site scripting vulnerability that stems from incorrect manipulation of the parameters article.title/content.title/article.tag leading to cross-site scripting...

PT-2021-10333

Name of the Vulnerable Software and Affected Versions: Jeesns version 1.4.2 Description: A stored cross-site scripting XSS issue exists in the /article/add component, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted article. The "article/add" endpoint ...

CVE-2021-38602

PluXML 5.8.7 allows Article Editing stored XSS via Headline or Content...

PT-2017-14359

Name of the Vulnerable Software and Affected Versions Typecho versions prior to 1.1 Description The issue allows an attacker to log in to the background page, create a new article, and inject malicious payload into the article content, resulting in a cross-site scripting XSS attack via the...