HongCMS Cross-Site Scripting Vulnerability (CNVD-2019-36217)

HongCMS is an open source lightweight content management system CMS. A cross-site scripting vulnerability exists in HongCMS. An attacker can exploit this vulnerability to execute client-side code...

WordPress content-grabber plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. content-grabber is an automated web content grabber plugin used in it. A cross-site scripting vulnerability exists in the WordPres...

WordPress incoming-links plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. incoming-links is a plugin for adding inbound links. A cross-site scripting vulnerability exists in the WordPress incoming-links...

WordPress broken-link-manager plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. broken-link-manager is a backlink management plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

Open-Xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2019-36981)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in Open-Xchange OX App Suite versions 7.10.1 and 7.10.2. The vulnerabili...

WordPress searchterms-tagging-2 plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. searchterms-tagging-2 is an SEO Search Engine Optimization plugin used in it. A cross-site scripting vulnerability exists in the...

NETGEAR JNR1010 Cross-Site Scripting Vulnerability

The NETGEAR JNR1010 is a wireless router from NETGEAR. A cross-site scripting vulnerability exists in versions prior to NETGEAR JNR1010 1.0.0.32, which can be exploited by an attacker to execute client-side code...

NCH Software Express Invoice Cross-Site Scripting Vulnerability

NCH Software Express Invoice is an inventory system from NCH Software Australia. The system is mainly used for invoice management, etc. A cross-site scripting vulnerability exists in NCH Software Express Invoice version 7.12, which stems from the lack of proper validation of client-side data in t...

IceWarp Mail Server Cross-Site Scripting Vulnerability (CNVD-2019-36914)

IceWarp Mail Server is a mail server product from IceWarp USA. The product supports e-mail archiving, SmartAttach attachments, automatic migration, etc. IceWarp Webclient is a Web-based IceWarp client program. A cross-site scripting vulnerability exists in IceWarp Webclient versions prior to...

IceWarp Mail Server Cross-Site Scripting Vulnerability (CNVD-2019-36913)

IceWarp Mail Server is a mail server product from IceWarp USA. The product supports e-mail archiving, SmartAttach attachments, automatic migration, etc. IceWarp Webclient is a Web-based IceWarp client program. A cross-site scripting vulnerability exists in IceWarp Webclient versions prior to...

Hotaru CMS Cross-Site Scripting Vulnerability

Hotaru CMS is an open source content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in Hotaru CMS v1.7.2. The vulnerability stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability to...

WordPress simple-fields plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. simple-fields is a custom fields plugin used in it. A cross-site scripting vulnerability exists in the WordPress simple-fields plugin...

WordPress job-manager plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. job-manager is a recruitment/job search plugin used in it. A cross-site scripting vulnerability exists in the WordPress job-manager...

WordPress liveforms plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. liveforms is a drag-and-drop form builder plugin used in it. A cross-site scripting vulnerability exists in the WordPress liveforms...

WordPress download-monitor plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. download-monitor is a plugin for uploading and managing downloadable files. A cross-site scripting vulnerability exists in the WordPre...

Sensorweb ScadaBR Cross-Site Scripting Vulnerability (CNVD-2019-36859)

Sensorweb ScadaBR is a suite of open source software from Sensorweb for developing automated data acquisition and monitoring applications. A cross-site scripting vulnerability exists in the login form /ScadaBR/login.htm in Sensorweb ScadaBR version 1.0CE, which stems from a lack of proper...

WordPress adsense-plugin plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. adsense-plugin is a web ad insertion plugin used in it. A cross-site scripting vulnerability exists in the WordPress adsense-plugin...

LavaLite Cross-Site Scripting Vulnerability (CNVD-2021-48847)

LavaLite is an open source lightweight content management system CMS. A cross-site scripting vulnerability exists in LavaLite 5.7 and earlier versions, which stems from a lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to execute client-sid...

WordPress liquid-speech-balloon plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. liquid-speech-balloon is a visual editor plugin used in it. A cross-site scripting vulnerability exists in the WordPress...

WordPress custom-search-plugin plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. custom-search-plugin is a custom search plugin used in it. A cross-site scripting vulnerability exists in WordPress custom-search-plug...