189 matches found
CVE-2021-24299: Improper Neutralization of Input During Web Page Generation
The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an 'Upcoming' page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant...
CVE-2021-27288
Cross Site Scripting XSS in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "Comment" field in "/profile/activity" page...
CVE-2021-27288
Cross Site Scripting XSS in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "Comment" field in "/profile/activity" page...
CVE-2021-27288
Cross Site Scripting XSS in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "Comment" field in "/profile/activity" page...
CVE-2021-27288
Cross Site Scripting XSS in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "Comment" field in "/profile/activity" page...
PT-2021-17384
Name of the Vulnerable Software and Affected Versions X2Engine X2CRM version 7.1 Description The issue allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the Comment field in the "/profile/activity" API endpoint. This can lead to the disclosure o...
CVE-2021-27288: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "Comment" field in "/profile/activity" page...
Wordpress Modern Events Calendar Lite 跨站脚本漏洞
Wordpress Modern Events Calendar Lite is Wordpress open source plugin for an application. The plugin is used to manage the best tools for events website. A cross-site scripting vulnerability exists in the Modern Events Calendar Lite WordPress plugin versions prior to 5.16.5. The vulnerability ste...
CVE-2021-28115
The OUGC Feedback plugin before 1.8.23 for MyBB allows XSS via the comment field of feedback during an edit operation...
CVE-2021-28115
The OUGC Feedback plugin before 1.8.23 for MyBB allows XSS via the comment field of feedback during an edit operation...
CVE-2021-28115
The OUGC Feedback plugin before 1.8.23 for MyBB allows XSS via the comment field of feedback during an edit operation...
CVE-2021-28115
The OUGC Feedback plugin before 1.8.23 for MyBB allows XSS via the comment field of feedback during an edit operation...
OUGC Feedback 跨站脚本漏洞
Omar Gonzalez OUGC-Feedback is an open source application by Omar Gonzalez. Provides a forum to add a powerful feedback system features . A cross-site scripting vulnerability exists in the OUGC Feedback plugin before 1.8.23 for MyBB, which allows XSS via the comment field of a feedback during an...
PT-2021-17751
Name of the Vulnerable Software and Affected Versions: OUGC Feedback plugin versions prior to 1.8.23 for MyBB Description: The issue allows for XSS via the comment field of feedback during an edit operation. Recommendations: For versions prior to 1.8.23, update to version 1.8.23 or later to resol...
CVE-2021-28115: Improper Neutralization of Input During Web Page Generation
The OUGC Feedback plugin before 1.8.23 for MyBB allows XSS via the comment field of feedback during an edit operation...
MISP cross-site scripting vulnerability (CNVD-2021-08162)
MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and threats related to cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in...
CVE-2020-29572
app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field...
CVE-2020-29572
app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field...
Design/Logic Flaw
app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field...
CVE-2020-29572: Improper Neutralization of Input During Web Page Generation
app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field...