36 matches found
CVE-2025-65342
code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...
CVE-2025-65342
The code-projects Blood System 1.0 is vulnerable to Cross-Site Scripting (XSS) . The flaw exists in the /don.php page, specifically when processing the city field due to improper neutralization of input during web page generation. While technical details regarding the root cause and remediation a...
CVE-2025-65342: Improper Neutralization of Input During Web Page Generation
code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...
PT-2026-66579
code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...
CVE-2025-65342
code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...
EUVD-2025-210559
code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...
Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata
SummaryA stored Cross-site Scripting XSS vulnerability was identified in the RSE metadata of the WebUI where attacker-controlled input is persisted by the backend and later rendered in the WebUI without proper output encoding. This allows arbitrary JavaScript execution in the context of the WebUI...
EUVD-2026-28270
Admidio is an open-source user management solution. Prior to version 5.0.9, the member assignment DataTables endpoint membersassignmentdata.php includes hidden profile fields BIRTHDAY, STREET, CITY, POSTCODE, COUNTRY in its SQL search condition regardless of field visibility settings. While the...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the rendering of RSE metadata in the WebUI. An attacker can execute arbitrary JavaScript in the users' context by injecting malicious scripts into the City, CountryName, or ISP fields, which are then stored...
CVE-2025-14205
A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is an unknown function of the file /membershipprofile.php of the component Your Info Handler. Performing manipulation of the argument Full Name/Address/City/State results in cross site...
CVE-2023-1179
A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add Supplier Handler. The manipulation of the argument companyname/province/city/phonenumber leads to cross site...
Insurance Management System 安全漏洞
Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions that stems from a cross-site scripting XSS vulnerability in the City field...
BloodBank SQL注入漏洞
phpscriptpoint BloodBank is a responsive blood bank and donor content management system CMS from phpscriptpoint. A SQL injection vulnerability exists in BloodBank version 1.1, which stems from an SQL injection vulnerability in the reference country/city/bloodgroupid...
PT-2023-25560
Name of the Vulnerable Software and Affected Versions Hostel Management System version 2.1 Description The issue allows an attacker to execute arbitrary code through a crafted payload to parameters such as Guardian name, Guardian relation, complimentary address, city, permanent address, and city ...
PT-2023-10560 · Insteon · Insteon Hub
Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel. Specially crafted commands sent through the PubNub service can cause a stack-based buffer...
GHSA-XVPX-6HH8-7H72 Magento XML Injection vulnerability in the 'City' field
Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an XML Injection vulnerability in the 'City' field. An unauthenticated attacker can trigger a specially crafted script to achieve remote code execution...
Magento XML Injection vulnerability in the 'City' field
Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an XML Injection vulnerability in the 'City' field. An unauthenticated attacker can trigger a specially crafted script to achieve remote code execution...
CVE-2022-1051
The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not sanitise and escape the city, phone or profile credentials fields when outputting it in the profile page, allowing any authenticated user to perform Cross-Site Scripting attacks...
WordPress plugin WPQA 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions of WordPress WPQAs plugin prior to 5.2, which...
