Cross site scripting

Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the title parameter in the new book and edit book function...

Badaso 跨站脚本漏洞

Badaso is Uasoft open source an open source Laravel Vue headless CMS. Badosa v2.9.7 version of the cross-site scripting vulnerability , the vulnerability stems from the application of the user-supplied data lack of effective filtering and escaping , an attacker can exploit the vulnerability throu...

CVE-2023-38969

CVE-2023-38969 affects Badaso v2.9.7, a Laravel/Vue headless CMS. The vulnerability arises from insufficient filtering/escaping of user-supplied data in the title parameter of the new book and edit book functions, enabling a remote attacker to inject a crafted payload and potentially execute arbi...

CVE-2023-38969

Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the title parameter in the new book and edit book function...

CVE-2023-38974

A stored cross-site scripting XSS vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...

CVE-2023-38974

A stored cross-site scripting XSS vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...

CVE-2023-38973

A stored cross-site scripting XSS vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...

CVE-2023-38973

A stored cross-site scripting XSS vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...

PT-2023-26713 · Badaso · Badaso

Name of the Vulnerable Software and Affected Versions: Badaso version 2.9.7 Description: A stored cross-site scripting XSS issue in the Edit Category function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter. Recommendations: For...

CVE-2023-38974

A stored cross-site scripting XSS vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...

CVE-2023-38974

A stored cross-site scripting XSS vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...

Badaso 跨站脚本漏洞

Badaso is an open source Laravel Vue headless CMS from Uasoft. A security vulnerability exists in Badaso v2.9.7, which originates from the execution of arbitrary web script or HTML via the Title parameter in the Add Tag method...

Badaso 跨站脚本漏洞

Badaso is an open source Laravel Vue headless CMS from Uasoft. A security vulnerability exists in Badaso v2.9.7, which originates from the execution of arbitrary web script or HTML via the Title parameter in the Edit Category method...

CVE-2023-38973

The CVE-2023-38973 entry describes a stored XSS in the Add Tag function of Badaso v2.9.7, triggered by crafted payload in the Title parameter. This is the confirmed vulnerability surface: web-accessible Add Tag title handling allows script/HTML execution. No exploit details are provided in the co...

CVE-2023-38973

A stored cross-site scripting XSS vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...

CVE-2023-38974

A stored cross-site scripting XSS vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...

CVE-2023-38973

A stored cross-site scripting XSS vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...

CVE-2023-38974

CVE-2023-38974 affects Badaso v2.9.7 with a stored XSS in the Edit Category Title parameter. Root cause: input not sanitized in the Title field. Impact: arbitrary script execution in user browsers as described by sources; exploitation details not provided. Remediation: no patch/version in CVE doc...