Sensorweb ScadaBR Cross-Site Scripting Vulnerability (CNVD-2019-36859)

Sensorweb ScadaBR is a suite of open source software from Sensorweb for developing automated data acquisition and monitoring applications. A cross-site scripting vulnerability exists in the login form /ScadaBR/login.htm in Sensorweb ScadaBR version 1.0CE, which stems from a lack of proper...

cPanel cross-site scripting vulnerability (CNVD-2019-34451)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the SSL Certificate Upload interface in versions of cPanel prior to 82.0.15. The...

Magento cross-site scripting vulnerability (CNVD-2019-34460)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento cross-site scripting vulnerability , the vulnerability stems from the lack of WEB applications on the...

b3log Symphony cross-site scripting vulnerability (CNVD-2019-34789)

b3log Symphony Sym is a modern open source community platform written in the Java language. A cross-site scripting vulnerability exists in b3log Symphony versions prior to 3.6.0, which stems from the lack of proper validation of client-side data by the WEB application and can be exploited by an...

avada theme for WordPress cross-site scripting vulnerability

avada theme for WordPress is a responsive multipurpose theme plugin for use in WordPress. A cross-site scripting vulnerability exists in avada theme for WordPress versions prior to 5.1.5. The vulnerability stems from a lack of proper validation of client-side data by the web application. An...

CloudBees Jenkins Dashboard View Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Dashboard View Plugin is used in which a...

Siemens IE/WSN-PA Link WirelessHART Gateway Cross-Site Scripting Vulnerability

The IE/WSN-PA Link is a gateway that connects the WirelessHART network to Industrial Ethernet. A cross-site scripting vulnerability exists in the Siemens IE/WSN-PA Link WirelessHART Gateway. The vulnerability stems from a lack of proper validation of client-side data by the web application. An...

WordPress updraftplus plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. updraftplus is a WordPress backup, restore, and clone plugin used in it. A cross-site scripting vulnerability exists in WordPress...

WordPress Related Posts Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Related Posts is a plugin for adding related content. WordPress Related Posts plugin version 1.8.2 before the cross-site scripting...

WordPress ckeditor-for-wordpress plugin cross-site scripting vulnerability

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. ckeditor-for-wordpress is an editor plugin used in it. A cross-site scripting vulnerability exists in the 'built-in old...

Ampache Cross-Site Scripting Vulnerability

Ampache is a web-based audio/video application and file manager. A cross-site scripting vulnerability exists in Ampache. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attacker can exploit the vulnerability to execute client-side code...

DWSurvey Cross-Site Scripting Vulnerability

DWSurvey is a questionnaire system written in Java. A cross-site scripting vulnerability exists in DWSurvey 2019-07-22 and earlier versions, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute client-side code...

Master Data Online Cross-Site Scripting Vulnerability

Master Data Online is a multi-functional data management platform. The platform mainly provides data normalization and data management functions. A cross-site scripting vulnerability exists in Master Data Online version 2.0. The vulnerability stems from the lack of proper validation of client-sid...

Zurmo cross-site scripting vulnerability (CNVD-2019-26160)

Zurmo is the United States Zurmo company's set of PHP-based open source customer relationship management system CRM. A cross-site scripting vulnerability exists in Zurmo version 3.2.7-2. The vulnerability stems from a lack of proper validation of client-side data by the web application. An attack...

EspoCRM Cross-Site Scripting Vulnerability (CNVD-2020-16551)

EspoCRM is an open source web-based customer relationship management CRM system. The system provides features such as sales automation, community and customer support. A cross-site scripting vulnerability exists in EspoCRM versions prior to 5.6.9. The vulnerability stems from the lack of proper...

Invenio-records Cross-Site Scripting Vulnerability

invenio-records is a metadata storage module. A cross-site scripting vulnerability exists in versions of invenio-records prior to 1.2.2. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute...

Editor.md Cross-Site Scripting Vulnerability (CNVD-2020-16530)

Editor.md is an open source embedded online Markdown a markup language editor. A cross-site scripting vulnerability exists in Editor.md version 1.5.0, which stems from the lack of proper validation of client-side data in a web application and can be exploited by an attacker to execute client-side...

Editor.md Cross-Site Scripting Vulnerability

Editor.md is an open source embedded online Markdown a markup language editor. A cross-site scripting vulnerability exists in Editor.md version 1.5.0, which stems from the lack of proper validation of client-side data in a web application and can be exploited by an attacker to execute client-side...

GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2019-24212)

GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 version 5.3.1.9. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side...

HexoEditor Cross-Site Scripting Vulnerability

HexoEditor is an open source for Hexo blogging framework has been optimized for Markdown a markup language that can be written using a regular text editor editor. A cross-site scripting vulnerability exists in HexoEditor v1.1.8-beta. The vulnerability stems from a lack of proper validation of...