4227 matches found
PluXml 跨站脚本漏洞
PluXml is a free and open source content management system that does not require a database to work. A cross-site scripting vulnerability exists in PluXML, which stems from a stored XSS vulnerability that the Article Editing feature of PluXML 5.8.7 allows to be implemented via headers or content...
2021-08 Dynamic Cumulative Update for Windows 10 Version 2004 for x86-based Systems (KB5005033)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2021-08 Dynamic Cumulative Update for Windows 10 Version 2004 for x64-based Systems (KB5005033)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
CMS Made Simple < 2.2.15 XSS Vulnerability (Jul 2021)
CMS Made Simple is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
5 Themes for Product Security and Fostering Organizational Growth
In this article we would like to review what Raj Umadas, Product Security Manager at Compass, has shared during our recent webinar highlighting recurring themes that have led to impactful collaborations and organizational risk reduction. Product security ProdSec is crucial in the process of growi...
CVE-2021-33336
Cross-site scripting XSS vulnerability in the Journal module's add article menu in Liferay Portal 7.3.0 through 7.3.3, and Liferay DXP 7.1 fix pack 18, and 7.2 fix pack 5 through 7, allows remote attackers to inject arbitrary web script or HTML via the comliferayjournalwebportletJournalPortletnam...
CVE-2021-33336: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Journal module's add article menu in Liferay Portal 7.3.0 through 7.3.3, and Liferay DXP 7.1 fix pack 18, and 7.2 fix pack 5 through 7, allows remote attackers to inject arbitrary web script or HTML via the comliferayjournalwebportletJournalPortletnam...
CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2021-57426)
CMS Made Simple is a simple and easy-to-use content management system developed using PHP, MySQL, and Smarty template engine. version 2.2.14 of CMS Made Simple contains a cross-site scripting vulnerability. The vulnerability can be exploited by attackers via the "Extra" function in the "News...
CVE-2020-23241
Cross Site Scripting XSS vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News Article" feature...
CVE-2020-23241
Cross Site Scripting XSS vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News Article" feature...
Cross site scripting
Cross Site Scripting XSS vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News Article" feature...
CVE-2020-23241
Cross Site Scripting XSS vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News Article" feature...
CVE-2020-23241
CMS Made Simple 2.2.14 is affected by a Cross-Site Scripting (XSS) vulnerability in the “Extra” via the News > Article feature. The issue is documented across multiple sources, indicating the vulnerable component is the News > Article path in the CMS Made Simple 2.2.14 implementation, with ...
CVE-2021-37392
In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. When the API functions are enabled, the attacker can use API to update user nickname with XSS payload and achieve stored XSS. Users who view the articles published by the injected user will...
CVE-2021-37393
In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. Attacker can use "update password" function to inject XSS payloads into nickname variable, and achieve stored XSS. Users who view the articles published by the injected user will trigger the...
Cross site scripting
In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. Attacker can use "update password" function to inject XSS payloads into nickname variable, and achieve stored XSS. Users who view the articles published by the injected user will trigger the...
CVE-2020-23241: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News Article" feature...
CMS Made Simple 跨站脚本漏洞
CMS Made Simple is a simple and easy-to-use content management system developed using PHP, MySQL, and Smarty template engine. version 2.2.14 of CMS Made Simple contains a cross-site scripting vulnerability. The vulnerability can be exploited by attackers via the "Extra" function in the "News...
PT-2021-10866
Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.14 Description The issue is related to a Cross Site Scripting XSS vulnerability. It affects the "Extra" feature via the 'News Article' feature. Recommendations For CMS Made Simple version 2.2.14, update to a version...
2021-07 Dynamic Cumulative Update for Windows 10 Version 21H1 for ARM64-based Systems (KB5004237)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...