Fork CMS Cross-Site Scripting Vulnerability (CNVD-2020-31119)

Fork CMS is an open source content management system CMS developed using PHP. The system contains blogs , questions and answers , forms and other modules . A cross-site scripting vulnerability exists in Fork versions prior to 5.8.3. The vulnerability stems from the lack of proper validation of...

PCS DEXICON Cross-Site Scripting Vulnerability

PCS DEXICON is a solution for time recording and access control. A cross-site scripting vulnerability exists in the 'loginName' parameter in the loginaction.jsp file in PCS DEXICON version 3.4.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. ...

Open edX cross-site scripting vulnerability (CNVD-2020-33666)

Open edX is an online learning management system from edX Corporation in the United States. A cross-site scripting vulnerability exists in Studio in Open edX Ironwood version 2.5, which stems from the lack of proper validation of client-side data in the WEB application and can be exploited by an...

Dolibarr ERP/CRM Cross-Site Scripting Vulnerability (CNVD-2020-33669)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A cross-site scripting vulnerability exists in Dolibarr ERP/CR...

Submitty Cross-Site Scripting Vulnerability

Submitty is an open source course management system . The system supports course management , assignment submission , exams and grading system and other functions . A cross-site scripting vulnerability exists in Submitty 20.04.01 and earlier versions , the vulnerability stems from the lack of...

SAP Enterprise Threat Detection Cross-Site Scripting Vulnerability

SAP Enterprise Threat Detection is a product that detects if an SAP system is under malicious attack. SAP Enterprise Threat Detection suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could explo...

SAP Business Objects Business Intelligence Platform Cross-Site Scripting Vulnerability (CNVD-2020-65699)

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. A cross-site scripting vulnerability exists in SAP Business Objects...

UliCMS Cross-Site Scripting Vulnerability (CNVD-2020-35500)

UliCMS is an open source content management system CMS. The system supports features such as access control and WYSIWYG editing. A cross-site scripting vulnerability exists in UliCMS versions prior to 2020.2. The vulnerability stems from a lack of proper validation of client-side data by the WEB...

Mono MonoX CMS Cross-Site Scripting Vulnerability

MonoX CMS is an ASP.NET-based content management system CMS and social networking platform from Mono Croatia. A cross-site scripting vulnerability exists in Mono MonoX CMS 5.1.40.5152 and earlier versions. The vulnerability stems from a lack of proper validation of client-side data by the web...

jQuery cross-site scripting vulnerability (CNVD-2020-27491)

jQuery is the United States John Resig programmer of a set of open source , cross-browser JavaScript library . The library simplifies the operation between HTML and JavaScript , and has a modular , plug-in extensions and other features . A cross-site scripting vulnerability exists in jQuery. The...

Lexmark Pro910 Cross-Site Scripting Vulnerability

The Lexmark Pro910 is a Pro910 printer from Lexmark USA. A cross-site scripting vulnerability exists in the Lexmark Pro910 series. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side...

Zoom Call Recording Cross-Site Scripting Vulnerability

Zoom Call Recording is a scalable session recording management solution from Zoom USA. The product supports features such as recording, managing and finding session records. A cross-site scripting vulnerability exists in Zoom Call Recording version 6.3.1. The vulnerability stems from a lack of...

Croogo Cross-Site Scripting Vulnerability (CNVD-2020-33328)

Croogo is a content management system CMS based on the CakePHP framework development . The system provides content type can be customized for Blog, Node, Page, content editing using WYSIWYG editor and other features. A cross-site scripting vulnerability exists in versions prior to Croogo 3.0.7. T...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-28010)

NETGEAR EX7000 and others are products of NETGEAR, Inc.NETGEAR EX7000 is a wireless network signal extender.WNR3500L is a wireless router.NETGEAR D6400 is a wireless modem.WNR3500L is a wireless router.WNR3500L is a wireless router.WNR3500L is a wireless router.WNR3500L is a wireless...

AirDisk Pro app cross-site scripting vulnerability (CNVD-2020-25588)

AirDisk Pro app is a mobile application for managing AirDisk Pro wireless storage devices. The program supports document viewing, PDF reading, music playback, image viewing, text editing and file management. A cross-site scripting vulnerability exists in version 5.5.3 of the AirDisk Pro app for...

PrestaShop cross-site scripting vulnerability (CNVD-2020-25945)

PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in PrestaShop versions after 1.7.4.0 fixed in version...

OpenMRS Cross-Site Scripting Vulnerability (CNVD-2020-24048)

OpenMRS is an open source electronic medical record system from OpenMRS, Inc. in the United States. A cross-site scripting vulnerability exists in OpenMRS. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerabili...

PrestaShop Cross-Site Scripting Vulnerability (CNVD-2020-25950)

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A cross-site scripting vulnerability exists in PrestaShop pslinklist versions prior t...

Cross-site scripting vulnerability in multiple NETGEAR products (CNVD-2020-30685)

NETGEAR D3600 and others are products of NETGEAR Corporation.NETGEAR D3600 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR DM200 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless router.NETGEAR R7500 is a wireless...

Aruba Networks ClearPass Cross-Site Scripting Vulnerability (CNVD-2020-33639)

Aruba Networks ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. A cross-site scripting vulnerability exists in Aruba Networks ClearPass. The vulnerability stems from a lack of proper validation of...