Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2020-33669)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...

Open edX cross-site scripting vulnerability (CNVD-2020-33666)

Open edX is an online learning management system from edX Corporation in the United States. A cross-site scripting vulnerability exists in Studio in Open edX Ironwood version 2.5, which stems from the lack of proper validation of client-side data in the WEB application and can be exploited by an...

Submitty Cross-Site Scripting Vulnerability

Submitty is an open source course management system . The system supports course management , assignment submission , exams and grading system and other functions . A cross-site scripting vulnerability exists in Submitty 20.04.01 and earlier versions , the vulnerability stems from the lack of...

SAP Business Objects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2020-65699)

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. A cross-site scripting vulnerability exists in SAP Business Objects...

SAP Enterprise Threat Detection Cross-Site Scripting Vulnerability

SAP Enterprise Threat Detection is a product that detects if an SAP system is under malicious attack. SAP Enterprise Threat Detection suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could explo...

UliCMS Cross-Site Scripting Vulnerability (CNVD-2020-35500)

UliCMS is an open source content management system CMS. The system supports features such as access control and WYSIWYG editing. A cross-site scripting vulnerability exists in UliCMS versions prior to 2020.2. The vulnerability stems from a lack of proper validation of client-side data by the WEB...

Mono MonoX CMS Cross-Site Scripting Vulnerability

MonoX CMS is an ASP.NET-based content management system CMS and social networking platform from Mono Croatia. A cross-site scripting vulnerability exists in Mono MonoX CMS 5.1.40.5152 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the web...

jQuery cross-site scripting vulnerability (CNVD-2020-27491)

jQuery is the United States John Resig programmer of a set of open source , cross-browser JavaScript library . The library simplifies the operation between HTML and JavaScript , and has a modular , plug-in extensions and other features . A cross-site scripting vulnerability exists in jQuery. The...

Lexmark Pro910 Cross-Site Scripting Vulnerability

The Lexmark Pro910 is a Pro910 printer from Lexmark USA. A cross-site scripting vulnerability exists in the Lexmark Pro910 series. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side...

Zoom Call Recording Cross-Site Scripting Vulnerability

Zoom Call Recording is a scalable session recording management solution from Zoom USA. The product supports features such as recording, managing and finding session records. A cross-site scripting vulnerability exists in Zoom Call Recording version 6.3.1. The vulnerability stems from a lack of...

Croogo Cross-Site Scripting Vulnerability (CNVD-2020-33328)

Croogo is a content management system CMS based on the CakePHP framework development . The system provides content type can be customized for Blog, Node, Page, content editing using WYSIWYG editor and other features. A cross-site scripting vulnerability exists in versions prior to Croogo 3.0.7. T...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-28010)

NETGEAR EX7000 and others are products of NETGEAR, Inc.NETGEAR EX7000 is a wireless network signal extender.WNR3500L is a wireless router.NETGEAR D6400 is a wireless modem.WNR3500L is a wireless router.WNR3500L is a wireless router.WNR3500L is a wireless router.WNR3500L is a wireless...

AirDisk Pro app cross-site scripting vulnerability (CNVD-2020-25588)

AirDisk Pro app is a mobile application for managing AirDisk Pro wireless storage devices. The program supports document viewing, PDF reading, music playback, image viewing, text editing and file management. A cross-site scripting vulnerability exists in version 5.5.3 of the AirDisk Pro app for...

PrestaShop cross-site scripting vulnerability (CNVD-2020-25945)

PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in PrestaShop versions after 1.7.4.0 fixed in version...

OpenMRS Cross-Site Scripting Vulnerability (CNVD-2020-24048)

OpenMRS is an open source electronic medical record system from OpenMRS, Inc. in the United States. A cross-site scripting vulnerability exists in OpenMRS. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerabili...

Aruba Networks ClearPass Cross-Site Scripting Vulnerability (CNVD-2020-33639)

Aruba Networks ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. A cross-site scripting vulnerability exists in Aruba Networks ClearPass. The vulnerability stems from a lack of proper validation of...

PrestaShop Cross-Site Scripting Vulnerability (CNVD-2020-25950)

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in PrestaShop pslinklist versions prior t...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-30685)

NETGEAR D3600 and others are products of NETGEAR Corporation.NETGEAR D3600 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR DM200 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-27212)

The NETGEAR RBK50, among others, is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in the NETGEAR RBR50 version prior to 2.3.5.30, RBS50 version prior to 2.3.5.30, and RBK50 version prior to 2.3.5.30, which stems from the lack of proper validation of client-side data ...

Matrix42 Workspace Management Cross-Site Scripting Vulnerability

Matrix42 Workspace Management is a suite of workspace management software from Matrix42 Germany that combines the multiple functions of Unified Endpoint Management UEM, Software Asset Management SAM, Automated Endpoint Security AES, and Service Management ITSM to support the compliant management ...