27 matches found
CVE-2026-95166
In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...
CVE-2026-95165
Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...
CVE-2026-95165: Undefined Security Weakness
Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...
CVE-2026-95165
Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...
CVE-2026-95165
Bacularis versions 5.4.0 through 6.5.1 are vulnerable to a Cross-Site Scripting (XSS) vulnerability. The flaw exists specifically within the Organization name field . No information regarding the root cause, practical impact, remediation, or available exploits is provided in the documents.
CVE-2026-95166
In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...
CVE-2026-95166
Bacularis versions v1.0.0 - 6.5.1 are vulnerable to a Cross Site Scripting (XSS) vulnerability. This occurs when a user adds a new pool, as the LabelFormat field fails to properly neutralize input, allowing for the execution of an XSS payload . Exploitation details and specific remediation steps ...
EUVD-2026-92702
In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...
EUVD-2026-92703
Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...
PT-2026-106166
Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting XSS in the Organization name field...
PT-2026-106194
In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...
CVE-2026-95166
In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...
CVE-2026-95166: Undefined Security Weakness
In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting XSS payload...
CVE-2026-88743
Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...
CVE-2026-88742
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2026-88743
Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...
CVE-2026-88742
Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...
CVE-2026-88742
Bacularis versions 1.0.0 through 6.5.0 are vulnerable to Stored cross-site scripting (XSS) . The vulnerability exists within the client address field , where improper neutralization of input during web page generation allows for script injection. Exploitation details are not provided in the docum...
CVE-2026-88743
Versions 4.7.0 - 6.5.0 of Bacularis are vulnerable to Stored cross-site scripting (XSS) within director tags . This vulnerability is caused by the improper neutralization of input during web page generation. The documents do not provide specific information regarding a root cause, practical impac...