Lucene search
K

64 matches found

RedhatCVE
RedhatCVE
added 2025/12/05 6:34 p.m.7 views

CVE-2025-14013

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. Th...

4.8CVSS5.4AI score0.0023EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/04 9:31 p.m.4 views

EUVD-2025-201262

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. Th...

4.8CVSS5AI score0.0023EPSS
Exploits1References5
NVD
NVD
added 2025/12/04 7:16 p.m.5 views

CVE-2025-14013

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. Th...

4.8CVSS0.0023EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/04 6:2 p.m.5 views

CVE-2025-14013 JIZHICMS Comment addcomment.html cross site scripting

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. Th...

4.8CVSS5.2AI score0.0023EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/12/04 6:2 p.m.25 views

CVE-2025-14013 JIZHICMS Comment addcomment.html cross site scripting

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. Th...

4.8CVSS0.0023EPSS
Exploits1References4
CVE
CVE
added 2025/12/04 6:2 p.m.8 views

CVE-2025-14013

The CVE-2025-14013 entry affects JIZHICMS up to version 2.5.5, specifically the Comment Handler’s file /index.php/admins/Comment/addcomment.html. The issue is a cross-site scripting vulnerability caused by manipulation of the body parameter, with remote initiation possible and a public exploit av...

4.8CVSS3.1AI score0.0023EPSS
Exploits1References4Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-16564

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00565EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-12458

Malicious code in bioql PyPI...

5.1CVSS4.8AI score0.00324EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-58700

Malicious code in bioql PyPI...

6.1CVSS4.9AI score0.00608EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-28919

Malicious code in bioql PyPI...

5.1CVSS4.8AI score0.00293EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-51038

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00438EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.14 views

EUVD-2024-32262

Malicious code in bioql PyPI...

4CVSS4.8AI score0.00466EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-51745

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00238EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-57370

Malicious code in bioql PyPI...

4.8CVSS4.7AI score0.00582EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-12365

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00522EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/09/13 4:33 p.m.17 views

CVE-2025-10255

A vulnerability was determined in Ascensio System SIA OnlyOffice up to 12.7.0. Impacted is an unknown function of the file /Products/Projects/Messages.aspx of the component Comment Handler. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit h...

5.1CVSS5.6AI score0.00293EPSS
Exploits0References1
NVD
NVD
added 2025/09/11 4:15 p.m.17 views

CVE-2025-10255

A vulnerability was determined in Ascensio System SIA OnlyOffice up to 12.7.0. Impacted is an unknown function of the file /Products/Projects/Messages.aspx of the component Comment Handler. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit h...

5.1CVSS0.00293EPSS
Exploits0References4
CVE
CVE
added 2025/09/11 4:2 p.m.21 views

CVE-2025-10255

CVE-2025-10255 affects Ascensio System SIA OnlyOffice up to version 12.7.0. The issue is tied to an unknown function in the file /Products/Projects/Messages.aspx within the Comment Handler component, which can enable remote cross-site scripting via manipulation. Public exploit details exist, and ...

5.1CVSS5.3AI score0.00293EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/09/11 4:2 p.m.11 views

CVE-2025-10255 Ascensio System SIA OnlyOffice Comment Messages.aspx cross site scripting

A vulnerability was determined in Ascensio System SIA OnlyOffice up to 12.7.0. Impacted is an unknown function of the file /Products/Projects/Messages.aspx of the component Comment Handler. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit h...

5.1CVSS0.00293EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/09/11 12:0 a.m.4 views

PT-2025-37192

Name of the Vulnerable Software and Affected Versions: OnlyOffice versions through 12.7.0 Description: A vulnerability exists in Ascensio System SIA OnlyOffice that can lead to cross site scripting. The issue is located in the Comment Handler component, specifically within the file...

5.1CVSS3.1AI score0.00293EPSS
Exploits0References6
Rows per page
Query Builder