15 matches found
EUVD-2022-24506
Malicious code in bioql PyPI...
EUVD-2022-2782
Malicious code in bioql PyPI...
CVE-2022-1164
The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature...
Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability
Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search searchnom field to 1 htdocs/societe/societe.php or 2 htdocs/societe/admin/societe.php...
CVE-2022-1164
The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature...
CVE-2022-1164
The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature...
CVE-2022-1164
The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature...
Cross site scripting
The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature...
CVE-2022-1164
Consolidated details show CVE-2022-1164 affects the WordPress Wyzi Theme plugin (Wyzi < 2.4.3) with a reflected XSS in the business search feature. The issue is documented across multiple sources (e.g., CVE listing, Red Hat, CNVD, CVE CNVD aggregations) as a reflected XSS vulnerability. The NV...
CVE-2022-1164: Improper Neutralization of Input During Web Page Generation
The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature...
Wyzi < 2.4.3 - Reflected Cross-Site Scripting (XSS)
The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature PoC https://example.com/business/?keyword=%22%3E%3Cimg%20src=x%20onerror=alert/XSS/%3Easd&wyz-loc-filter-txt;=&loc-filter-txt;=&loc-filter-lat;=&loc-filter-lng;===0...
Cross-site Scripting (XSS)
Dolibarr is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script through the Business search field in htdocs/societe/societe.php or htdocs/societe/admin/societe.php...
CVE-2015-3935
Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search searchnom field to 1 htdocs/societe/societe.php or 2 htdocs/societe/admin/societe.php...
CVE-2015-3935
Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search searchnom field to 1 htdocs/societe/societe.php or 2 htdocs/societe/admin/societe.php...
CVE-2015-3935: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search searchnom field to 1 htdocs/societe/societe.php or 2 htdocs/societe/admin/societe.php...