PT-2022-25239 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS affected versions not specified Description: A problematic issue has been found in FeehiCMS, affecting some unknown functionality of the Post My Comment Tab component. This issue leads to cross-site request forgery and can be exploit...

CVE-2022-4014

FeehiCMS exposes a CSRF vulnerability in the Post My Comment Tab component (CVE-2022-4014). The issue affects FeehiCMS and can be exploited remotely via an unknown functionality of the Post My Comment Tab, per multiple sources. The CVE entry notes cross-site request forgery with a CVSS v3.1 base ...

CVE-2022-4014 FeehiCMS Post My Comment Tab cross-site request forgery

A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The identifier of this...

FeehiCMS 跨站请求伪造漏洞

FeehiCMS is a Php-based CMS website builder by Liufee Personal Developer. A security vulnerability exists in FeehiCMS, which stems from an unknown feature of the component Post My Comment Tab being affected, which could lead to cross-site request forgery...

CVE-2022-4014: Incorrect Authorization

A vulnerability, which was classified as problematic, has been found in FeehiCMS. Affected by this issue is some unknown functionality of the component Post My Comment Tab. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The identifier of this...

CVE-2022-42000

Cross-site Scripting XSS vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permissions to inject arbitrary HTML into the comment section of a wikipage...

CVE-2022-42000

Cross-site Scripting XSS vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permissions to inject arbitrary HTML into the comment section of a wikipage...

CVE-2022-42000 Potential XSS in comment section

Cross-site Scripting XSS vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permissions to inject arbitrary HTML into the comment section of a wikipage...

kernel: ceph: fix memory leak in ceph_readdir when note_last_dentry returns error

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in cephreaddir when notelastdentry returns error Reset the lastreaddir at the same time, and add a comment explaining why we don't free lastreaddir when diremit returns false...

CVE-2022-42000: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permissions to inject arbitrary HTML into the comment section of a wikipage...

BlueSpice 跨站脚本漏洞

BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. A cross-site scripting vulnerability exists in BlueSpice versions prior to 4.2.1, which stems from the presence of cross-site scripting XSS that allows users with comment privileges to inject arbitrary HTML into the...

PT-2022-26205 · Unknown +1 · Bluespicesocialprofile +1

Name of the Vulnerable Software and Affected Versions: BlueSpice affected versions not specified Description: The issue allows a user with comment permissions to inject arbitrary HTML into the comment section of a wikipage, which can lead to Cross-site Scripting XSS. This occurs in the...

Upgraded Q -> M from #272 [1668215320788]

Judge has assessed an item in Issue 272 as M risk. The relevant finding follows: Inaccurate comment can be misleading. The following retrievePledgeRewards function is for retrieving the non-distributed rewards from an expired pledge, not just a closed pledge. Calling this function for a pledge th...

CVE-2021-39473

Saibamen HotelManager v1.2 is vulnerable to Cross Site Scripting XSS due to improper sanitization of comment and contact fields...

CVE-2021-39473

Saibamen HotelManager v1.2 is vulnerable to Cross Site Scripting XSS due to improper sanitization of comment and contact fields...

Cross site scripting

Saibamen HotelManager v1.2 is vulnerable to Cross Site Scripting XSS due to improper sanitization of comment and contact fields...

CVE-2021-39473

Saibamen HotelManager v1.2 is vulnerable to Cross Site Scripting XSS due to improper sanitization of comment and contact fields...

PT-2022-10919 · Unknown · Saibamen Hotelmanager

Name of the Vulnerable Software and Affected Versions: Saibamen HotelManager version 1.2 Description: The issue is related to Cross Site Scripting XSS due to improper sanitization of comment and contact fields. This allows for potential malicious script injection. Recommendations: For Saibamen...

CVE-2021-39473: Improper Neutralization of Input During Web Page Generation

Saibamen HotelManager v1.2 is vulnerable to Cross Site Scripting XSS due to improper sanitization of comment and contact fields...

CLSA-2022-1667512639 Fix CVE(s): CVE-2016-3709

SECURITY UPDATE: Possible cross-site scripting vulnerability in libxml2 - debian/patches/CVE-2016-3709.patch: Revert commit 960f0e27 that has some problems - CVE-2016-3709 Fix parser termination from "Double hyphen within comment" error...