Lucene search
+L

9372 matches found

osv_cve
osv_cve
•added 2022/01/20 12:15 a.m.•24 views

CVE-2021-46026

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting XSS via the add blog tag function in the blog tag in the background blog management...

5.4CVSS5.8AI score0.00441EPSS
SaveExploits1References1
NVD
NVD
•added 2022/01/20 12:15 a.m.•31 views

CVE-2021-46026

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting XSS via the add blog tag function in the blog tag in the background blog management...

5.4CVSS0.00441EPSS
SaveExploits1References1
Prion
Prion
•added 2022/01/20 12:15 a.m.•31 views

Cross site scripting

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting XSS via the add blog tag function in the blog tag in the background blog management...

3.5CVSS5.2AI score0.00441EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2022/01/19 11:15 p.m.•14 views

CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

6.5CVSS6.5AI score0.00416EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/01/19 11:15 p.m.•19 views

CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

6.5CVSS5.8AI score0.00416EPSS
SaveExploits1References1
NVD
NVD
•added 2022/01/19 11:15 p.m.•30 views

CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

6.5CVSS0.00416EPSS
SaveExploits1References1
Prion
Prion
•added 2022/01/19 11:15 p.m.•29 views

Cross site request forgery (csrf)

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

4.3CVSS6.5AI score0.00416EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/01/19 11:04 p.m.•36 views

CVE-2021-46026

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting XSS via the add blog tag function in the blog tag in the background blog management...

5.5AI score0.00441EPSS
SaveExploits1References1
Mend
Mend
•added 2022/01/19 11:04 p.m.•7 views

CVE-2021-46026

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting XSS via the add blog tag function in the blog tag in the background blog management...

5.4CVSS0.00441EPSS
SaveExploits1References1
CVE
CVE
•added 2022/01/19 11:04 p.m.•84 views

CVE-2021-46026

CVE-2021-46026 affects the Mysiteforme system (permission management). The vulnerability is a Cross Site Scripting (XSS) flaw in the backend blog management’s article/blog tag function, stemming from insufficient validation of user-supplied data in the tag workflow. Impact: client-side JavaScript...

5.4CVSS5.2AI score0.00441EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/01/19 11:01 p.m.•47 views

CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

6.7AI score0.00416EPSS
SaveExploits1References1
Mend
Mend
•added 2022/01/19 11:01 p.m.•6 views

CVE-2021-46027

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

7.1CVSS0.00416EPSS
SaveExploits1References1
CVE
CVE
•added 2022/01/19 11:01 p.m.•73 views

CVE-2021-46027

CVE-2021-46027 concerns a CSRF vulnerability in the background blog management of mysiteforme . The description across sources states an attacker can craft a malicious link and, when a site administrator clicks it, a blog tag is added, indicating a cross-site request forgery in the backend admini...

6.5CVSS6.4AI score0.00416EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/19 12:00 a.m.•7 views

CVE-2021-46027: Cross-Site Request Forgery (CSRF)

mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added...

6.5CVSS5.8AI score0.00416EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/19 12:00 a.m.•28 views

PT-2022-12511 · Unknown · Mysiteforme

Name of the Vulnerable Software and Affected Versions: mysiteforme affected versions not specified Description: The issue concerns a Cross Site Scripting XSS vulnerability via the add blog tag function in the background blog management. This allows for potential malicious script execution...

5.4CVSS6AI score0.00441EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/01/19 12:00 a.m.•24 views

Mysiteforme cross-site scripting vulnerabilities

Mysiteforme is a permission management system. mysiteforme suffers from a cross-site scripting vulnerability that stems from the lack of user-supplied data and output data validation filtering in the blog tagging function of the backend blog management. An attacker could exploit the vulnerability...

5.4CVSS5.6AI score0.00441EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/19 12:00 a.m.•18 views

Mysiteforme Cross-Site Request Forgery Vulnerability

Mysiteforme is a permission management system. A cross-site request forgery vulnerability exists in mysiteforme, which stems from a lack of validation for cross-site request forgery in the backend blog administration. An attacker could use a forged malicious request to trick a victim into clickin...

6.5CVSS5.4AI score0.00416EPSS
SaveExploits1References2
Trend Micro Simply Security
Trend Micro Simply Security
•added 2022/01/19 12:00 a.m.•17 views

Microservice Security: How to Proactively Protect Apps

Microservices are growing in popularity—how can development teams embed seamless security into the entire pipeline? Fernando Cardoso, solutions architect at Trend Micro, breaks it down for you...

2.6AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/01/19 12:00 a.m.•27 views

PT-2022-12512 · Unknown · Mysiteforme

Name of the Vulnerable Software and Affected Versions: mysiteforme affected versions not specified Description: The issue concerns a CSRF vulnerability in the background blog management of mysiteforme. An attacker can construct a malicious link that, when clicked by an administrator, results in t...

6.5CVSS7AI score0.00416EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/19 12:00 a.m.•8 views

CVE-2021-46026: Improper Neutralization of Input During Web Page Generation

mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting XSS via the add blog tag function in the blog tag in the background blog management...

5.4CVSS5.8AI score0.00441EPSS
SaveExploits1References2
Rows per page
Query Builder