8732 matches found
PT-2022-24676 · Schoolbox Pty +1 · Schoolbox
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The application is affected by multiple instances of cross-site scripting XSS, including both stored and reflected XSS. Vulnerable features include student assessment submission, file...
SUSE-SU-2022:3800-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 102.4.0 bsc1204421 changed: Thunderbird will automatically detect and repair OpenPGP key storage corruption caused by using the profile import tool in Thunderbird 102 fixed: POP message download into a large fold...
butterfly-counselling.co.uk Cross Site Scripting vulnerability OBB-3003663
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Zimbra Collaboration Suite attachUrl Parameter Cross-Site Scripting Vulnerability
Synacor Zimbra Collaboration Suite ZCS is an open source collaboration suite from Synacor, USA. The product includes WebMail, Calendar, Address Book and more. A cross-site scripting vulnerability exists in Zimbra Collaboration Suite version 8.8.15, which stems from the lack of effective filtering...
CVE-2022-41351
In Zimbra Collaboration Suite ZCS 8.8.15, at the URL /h/calendar, one can trigger XSS by adding JavaScript code to the view parameter and changing the value of the uncheck parameter to a string instead of default value of 10...
Design/Logic Flaw
In Zimbra Collaboration Suite ZCS 8.8.15, at the URL /h/calendar, one can trigger XSS by adding JavaScript code to the view parameter and changing the value of the uncheck parameter to a string instead of default value of 10...
CVE-2022-41351
CVE-2022-41351 affects Zimbra Collaboration Suite (ZCS) 8.8.15. The vulnerability is a cross-site scripting (XSS) flaw at the /h/calendar endpoint, triggered by inserting JavaScript into the view parameter and setting the uncheck parameter to a non-numeric string. The underlying issue is describe...
Zimbra Collaboration Suite 跨站脚本漏洞
Synacor Zimbra Collaboration Suite ZCS is an open source collaboration suite from Synacor, USA. The product includes WebMail, Calendar, Address Book and more. A cross-site scripting vulnerability exists in Zimbra Collaboration Suite version 8.8.15, which stems from the lack of effective filtering...
[SECURITY] Fedora 35 Update: seamonkey-2.53.14-3.fc35
SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...
[SECURITY] Fedora 36 Update: seamonkey-2.53.14-3.fc36
SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...
Zimbra Collaboration Suite Remote Code Execution Vulnerability
Zimbra Collaboration Suite ZCS is an open source collaborative office suite. The product includes WebMail, Calendar, Address Book, etc. A security vulnerability exists in Zimbra Collaboration Suite ZCS versions 8.8.15 and 9.0, which stems from a lack of valid authentication of uploaded files by t...
CVE-2022-36390
Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
CVE-2022-36390
Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
Cross site scripting
Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
CVE-2022-36390 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
CVE-2022-36390 WordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
Authenticated subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Totalsoft Event Calendar – Calendar plugin = 1.4.6 at WordPress...
CVE-2022-36390
The CVE-2022-36390 entry concerns the WordPress Totalsoft Event Calendar – Calendar plugin (versions 1.4.6 and earlier). The root cause is an authenticated reflected cross-site scripting (XSS) vulnerability in the plugin’s handling of input, which can affect authenticated users (subscriber+). Pra...
PT-2022-23350 · Totalsoft · Totalsoft Event Calendar – Calendar Plugin
Name of the Vulnerable Software and Affected Versions: Totalsoft Event Calendar – Calendar plugin versions 1.4.6 and earlier Description: The issue is related to an Authenticated Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inject malicious scrip...
WordPress plugin Event Calendar – Calendar 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
vuetify 跨站脚本漏洞
vuetify is a German vuetify open source material component framework for Vue. A security vulnerability exists in vuetify versions 2.0.0-beta.4 through 2.6.10, which stems from incorrect input cleanup in the "eventName" function of the VCalendar component...