Cross site scripting

Textpattern 4.8.4 is affected by cross-site scripting XSS in the Body parameter...

CVE-2020-35854: Improper Neutralization of Input During Web Page Generation

Textpattern 4.8.4 is affected by cross-site scripting XSS in the Body parameter...

Textpattern 跨站脚本漏洞

Textpattern is a free open source content management system based on PHP and MySQL. A cross-site scripting vulnerability exists in the Body parameter in Textpattern 4.8.4. No detailed vulnerability details are provided at this time...

CVE-2020-35854

Textpattern 4.8.4 is affected by cross-site scripting XSS in the Body parameter...

CVE-2020-35854

Textpattern 4.8.4 (Textpattern CMS, PHP/MySQL) is affected by cross-site scripting (XSS) in the Body parameter. The connected data identifies the vulnerable component as the Body parameter handling but does not provide a root cause description beyond noting an XSS issue, nor any explicit exploita...

PT-2021-11863

Name of the Vulnerable Software and Affected Versions: Textpattern version 4.8.4 Description: The issue is related to cross-site scripting XSS in the Body parameter. This means an attacker could potentially inject malicious scripts into the website, affecting user sessions. Recommendations: For...

CVE-2012-1001: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 content parameter to includes/ajax.php or 2 body parameter to includes/error.php...

CVE-2019-14350

EspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the Knowledge base. A malicious attacker can inject JavaScript code in the body parameter during api/v1/KnowledgeBaseArticle knowledge-base record creation...

PT-2019-13629

Name of the Vulnerable Software and Affected Versions EspoCRM version 5.6.4 Description The issue is related to stored XSS due to the lack of filtration of user-supplied data in the Knowledge base. A malicious attacker can inject JavaScript code in the body parameter during the...

CVE-2019-14350: Improper Neutralization of Input During Web Page Generation

EspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the Knowledge base. A malicious attacker can inject JavaScript code in the body parameter during api/v1/KnowledgeBaseArticle knowledge-base record creation...

CVE-2018-13137

The Events Manager plugin 5.9.4 for WordPress has XSS via the dbemeventreapprovedemailbody parameter to the wp-admin/edit.php?posttype=event&page=events-manager-options URI...

PT-2019-8926 · WordPress · Events Manager

Name of the Vulnerable Software and Affected Versions: Events Manager plugin version 5.9.4 Description: The issue concerns a cross-site scripting XSS problem. It is exploited via the dbem event reapproved email body parameter to the "wp-admin/edit.php?post type=event&page=events-manager-options"...

Serendipity Cross-Site Scripting Vulnerability (CNVD-2019-01717)

Serendipity is a PHP-based blogging system developed by Serendipity team. The system supports the creation of online journals, blogs, web pages and more. A cross-site scripting vulnerability exists in Serendipity version 2.0.4, which can be exploited by a remote attacker to inject arbitrary web...

PT-2018-13663

Name of the Vulnerable Software and Affected Versions Nucleus CMS version 3.70 Description The issue allows for HTML Injection via the body parameter in index.php. Recommendations For Nucleus CMS version 3.70, avoid using the body parameter in the index.php endpoint until the issue is resolved...

CVE-2018-16636: Improper Neutralization of Input During Web Page Generation

Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter...

CVE-2018-6465

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

Hardcoded credentials

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

CVE-2018-6465

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

CVE-2018-6465: Improper Neutralization of Input During Web Page Generation

The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php...

PT-2018-17562

Name of the Vulnerable Software and Affected Versions PropertyHive plugin versions prior to 1.4.15 Description The issue allows for XSS via the body parameter to the "includes/admin/views/html-preview-applicant-matches-email.php" endpoint. Recommendations For versions prior to 1.4.15, update to...