Lucene search
+L

48 matches found

Fedora
Fedora
•added 2022/11/24 1:27 a.m.•21 views

[SECURITY] Fedora 37 Update: drupal7-link-1.11-1.fc37

The link module can be count to the top 50 modules in Drupal installations and provides a standard custom content field for links. With this module links can be added easily to any content types and profiles and include advanced validating and different ways of storing internal or external links...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/11/24 12:00 a.m.•11 views

Fedora: Security Advisory for drupal7-link (FEDORA-2022-d209710a36)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OSV
OSV
•added 2022/04/28 3:26 p.m.•24 views

CVE-2022-29584

Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows stored XSS when a particular Cascading Style Sheets CSS class for embedly is used, and JavaScript code is constructed to perform an action...

6AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/28 12:00 a.m.•3 views

CVE-2022-29584: Improper Neutralization of Input During Web Page Generation

Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows stored XSS when a particular Cascading Style Sheets CSS class for embedly is used, and JavaScript code is constructed to perform an action...

5.4CVSS6AI score0.00519EPSS
SaveExploits0References2
OSV
OSV
•added 2022/02/01 1:15 p.m.•17 views

CVE-2021-24686

The SVG Support WordPress plugin before 2.3.20 does not escape the "CSS Class to target" setting before outputting it in an attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00654EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2022/02/01 1:15 p.m.•10 views

CVE-2021-24686

The SVG Support WordPress plugin before 2.3.20 does not escape the "CSS Class to target" setting before outputting it in an attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.9AI score0.00654EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/01 12:00 a.m.•2 views

CVE-2021-24686: Improper Neutralization of Input During Web Page Generation

The SVG Support WordPress plugin before 2.3.20 does not escape the "CSS Class to target" setting before outputting it in an attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.7AI score0.00654EPSS
SaveExploits2References2
Zero Day Initiative
Zero Day Initiative
•added 2006/08/08 12:00 a.m.•52 views

Microsoft Internet Explorer CSS Class Ordering Memory Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific vulnerability exists due to improper handling of CSS...

7.5CVSS4AI score0.41112EPSS
SaveExploits0References1
Rows per page
Query Builder