Monstra CMS 3.0.4 Cross Site Scripting

Exploit Title: Monstra cms 3.0.4 - Persitent Cross-Site Scripting Date: 2018-04-14 Exploit Author: Wenming Jiang Vendor Homepage: https://github.com/monstra-cms/monstra Software Link: https://github.com/monstra-cms/monstra Version: 3.0.4 Tested on: php 5.6, apache2.2.29, macos 10.12.6 CVE...

CVE-2018-7447

mojoPortal through 2.6.0.0 is prone to multiple persistent cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. The 'Title' and 'Subtitle' fields of the 'Blog' page are vulnerable. NOTE: The software maintainer disputes this as a vulnerability because the fields...

Cross site scripting

DISPUTED mojoPortal through 2.6.0.0 is prone to multiple persistent cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. The 'Title' and 'Subtitle' fields of the 'Blog' page are vulnerable. NOTE: The software maintainer disputes this as a vulnerability because th...

CVE-2018-7447

mojoPortal through 2.6.0.0 is prone to multiple persistent cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. The 'Title' and 'Subtitle' fields of the 'Blog' page are vulnerable. NOTE: The software maintainer disputes this as a vulnerability because the fields...

CVE-2018-7447

mojoPortal up to version 2.6.0.0 is affected by persistent cross-site scripting in the Blog page’s Title and Subtitle fields due to inadequate input sanitization. The vulnerability arises from failing to filter user input, enabling XSS in affected pages. The maintainer disputes this as a vulnerab...

PT-2018-18076 · Mojoportal · Mojoportal

Name of the Vulnerable Software and Affected Versions: mojoPortal versions prior to 2.6.0.0 Description: The issue arises from the software's failure to sanitize user-supplied input, leading to multiple persistent cross-site scripting vulnerabilities. Specifically, the Title and Subtitle fields o...

escapemotions.com XSS vulnerability

Vulnerable URL: https://www.escapemotions.com/blog.php?id="';--=interview-with-artist-junkyard-sam Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 160662 VIP website status:| No...

merkleinc.com XSS vulnerability

Vulnerable URL: https://www.merkleinc.com/blog/marketing-solutions-and-strategies/marketing-technology?page=1" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 22:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

pluck.com XSS vulnerability

Open Bug Bounty ID: OBB-186086 Description| Value ---|--- Affected Website:| pluck.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

bynumveterinaryclinic.vetstreet.com XSS vulnerability

Vulnerable URL: http://bynumveterinaryclinic.vetstreet.com/blog.html?filter=xss%3Cimg%20src=x%20onerror=confirm%22OPENBUGBOUNTY%22%3E=xss%3Cimg%20src=x%20onerror=confirm%22OPENBUGBOUNTY%22%3E& Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:...

Pornhub: Cross Site Scripting - On Mouse Over, Blog page

The researcher identified that the following URL for the Pornhub user was vulnerable to reflected/semi-stored cross site scripting, which enabled the researcher to craft a URL that pops an alert box upon mousing over the language selection at bottom of page. The affected url can be seen below:...

pixnet.net XSS vulnerability

Vulnerable URL: https://www.pixnet.net/blog Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 93 Google Pagerank| 7 VIP website status:| Yes Check pixnet.net SSL connection:| Grade: A...

spletnik.ru XSS vulnerability

Vulnerable URL: http://www.spletnik.ru/blogs/govoryatchto/113769mozhet-pora-chto-to-sdelat?x"...

CVE-2009-0502

Cross-site scripting XSS vulnerability in blocks/html/blockhtml.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4, allows remote attackers to inject arbitrary web script or HTML via an HTML block, which is not properly handled when t...

Unfixed XSS vulnerability at rdfinewine.com

Security researcher Feralas, has submitted on 05/09/2008 a cross-site-scripting XSS vulnerability affecting rdfinewine.com, which at the time of submission ranked 8065978 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2008. It is current...

Unfixed XSS vulnerability at djantwan.com

Security researcher Feralas, has submitted on 05/09/2008 a cross-site-scripting XSS vulnerability affecting djantwan.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2008. It is currently...