CVE-2021-47738: Improper Neutralization of Input During Web Page Generation

CSZ CMS 1.2.7 contains a persistent cross-site scripting vulnerability that allows unauthorized users to embed malicious JavaScript in private messages. Attackers can send messages with script payloads in the user-agent header, which will execute when an admin views the message in the backend...

EUVD-2023-47763

Malicious code in bioql PyPI...

CVE-2023-43346

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard parameter in the Languages Menu component...

CVE-2023-43346: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard parameter in the Languages Menu component...

CVE-2023-43346

Cross-site scripting XSS vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard parameter in the Languages Menu component...

PT-2023-28795 · Opensolution · Opensolution Quick Cms

Name of the Vulnerable Software and Affected Versions: opensolution Quick CMS version 6.7 Description: A cross-site scripting XSS issue allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard parameter in the Languages Menu component. This enables the...

CVE-2023-43346

The CVE-2023-43346 issue affects opensolution Quick CMS v6.7. A cross-site scripting (XSS) flaw in the Languages Menu component allows a local attacker to execute arbitrary code through a crafted script sent to the Backend - Dashboard parameter. Documents consistently describe this as a local XSS...