5656 matches found
CVE-2022-4397
A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...
CVE-2022-4397 morontt zend-blog-number-2 Comment Comment.php cross-site request forgery
A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...
PT-2022-27050 · Unknown · Morontt Zend-Blog-Number-2
Name of the Vulnerable Software and Affected Versions: morontt zend-blog-number-2 affected versions not specified Description: A vulnerability was found in the component Comment Handler, specifically in the file application/forms/Comment.php. The manipulation leads to cross-site request forgery. ...
CVE-2022-4354
A vulnerability was found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /blog/comment of the component Message Board. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has be...
pb-cms 跨站脚本漏洞
pb-cms is a content management system by LinZhaoguan Personal Developer. A security vulnerability exists in version 2.0 of pb-cms, which originates from some unknown functions in the /blog/comment file of its Message Board component, allowing an attacker to implement cross-site scripting. The...
CVE-2022-4354: Improper Neutralization
A vulnerability was found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /blog/comment of the component Message Board. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has be...
puppetlabs-firewall: unmanaged rules could leave system in an unsafe state via duplicate comment
A flaw was found in the Puppet Firewall module. In certain situations, an unmanaged rule can exist on the target system that has the same comment as a rule specified in the manifest. When this condition is true, Puppet will ignore the unmanaged rule and continue to apply the rule in the manifest...
CVE-2022-36136
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...
Cross site scripting
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...
Cross-site Scripting (XSS)
backdrop/backdrop is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the comment section in the library, allowing an attacker to inject and execute malicious javascript...
CVE-2022-36136: Improper Neutralization of Input During Web Page Generation
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...
ChurchCRM 跨站脚本漏洞
ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version 4.4.5 that stems from the presence of XSS, allowing an attacker to store XSS via Deposit Comment input...
CVE-2022-36136
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...
PT-2022-23218 · Churchcrm · Churchcrm
Name of the Vulnerable Software and Affected Versions: ChurchCRM version 4.4.5 Description: The issue allows attackers to store XSS via location input Deposit Comment. This enables potential malicious activities through the exploitation of this input field. Recommendations: For ChurchCRM version...
CVE-2022-36136
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...
CVE-2022-36136
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...
CVE-2022-35500
Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting XSS via leave comment functionality...
Cross site scripting
Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting XSS via leave comment functionality...
CVE-2022-35500
CVE-2022-35500: Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via the leave comment functionality. Affected: Amasty Blog version 2.10.3. Root cause details are not explicitly provided in the documents, only the XSS via leave comment is stated. Remediation guidance from PT-2022-22...