Sitecore cross-site scripting vulnerability (CNVD-2019-26203)

Sitecore is an online marketing content management system CMS from Sitecore, Denmark. The system supports content editing, multiple languages, multi-site deployment, digital asset management and more. A cross-site scripting vulnerability exists in Sitecore CMS 9.0.1 and prior versions. The...

cPanel cross-site scripting vulnerability (CNVD-2019-26353)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...

cPanel cross-site scripting vulnerability (CNVD-2019-26352)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...

Magento Cross-Site Scripting Vulnerability (CNVD-2019-26248)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, 2.2.9 before version 2...

Magento cross-site scripting vulnerability (CNVD-2019-25989)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, 2.2.9 before version 2.2...

cPanel cross-site scripting vulnerability (CNVD-2019-26191)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...

cPanel cross-site scripting vulnerability (CNVD-2019-26189)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...

Invenio-records Cross-Site Scripting Vulnerability

invenio-records is a metadata storage module. A cross-site scripting vulnerability exists in versions of invenio-records prior to 1.2.2. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute...

Editor.md Cross-Site Scripting Vulnerability (CNVD-2020-16530)

Editor.md is an open source embedded online Markdown a markup language editor. A cross-site scripting vulnerability exists in Editor.md version 1.5.0, which stems from the lack of proper validation of client-side data in a web application and can be exploited by an attacker to execute client-side...

Magento cross-site scripting vulnerability (CNVD-2019-26231)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, 2.2.9 before version 2....

Magento cross-site scripting vulnerability (CNVD-2019-26244)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in the admin panel in Magento versions 2.1.18 before 2.1, 2.2.9 befor...

Magento cross-site scripting vulnerability (CNVD-2019-26245)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, 2.2.9 before version 2....

Magento cross-site scripting vulnerability (CNVD-2019-26247)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, 2.2.9 before version 2....

cPanel cross-site scripting vulnerability (CNVD-2019-26359)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 68.0.27, which stems from a lack of proper...

cPanel Cross-Site Scripting Vulnerability (CNVD-2019-26361)

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of...

cPanel cross-site scripting vulnerability (CNVD-2019-26204)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...

cPanel cross-site scripting vulnerability (CNVD-2019-26166)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in cPanel versions prior to 74.0.8. The vulnerability stems from a lack of proper...

cPanel cross-site scripting vulnerability (CNVD-2019-26199)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 70.0.23. The vulnerability stems from a lack of proper...

More on Backdooring (or Not) WhatsApp

Yesterday, I blogged about a Facebook plan to backdoor WhatsApp by adding client-side scanning and filtering. It seems that I was wrong, and there are no such plans. The only source for that post was a Forbes essay by Kalev Leetaru, which links to a previous Forbes essay by him, which links to a...

Editor.md Cross-Site Scripting Vulnerability

Editor.md is an open source embedded online Markdown a markup language editor. A cross-site scripting vulnerability exists in Editor.md version 1.5.0, which stems from the lack of proper validation of client-side data in a web application and can be exploited by an attacker to execute client-side...