5686 matches found
LinkedIn: Delete any LinkedIn comment on learning API of other users
Vulnerability description not provided...
XSS in Workflow Comment
Description XSS Vulnerability in Workflow Comment that user can insert javascript payload in comment Proof of Concept 1. navigate to dashboard and workflow settings 2. open the commend in side-bar and insert like this payload test POC:...
CVE-2022-4397
A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...
CVE-2022-4397 morontt zend-blog-number-2 Comment Comment.php cross-site request forgery
A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...
PT-2022-27050 · Unknown · Morontt Zend-Blog-Number-2
Name of the Vulnerable Software and Affected Versions: morontt zend-blog-number-2 affected versions not specified Description: A vulnerability was found in the component Comment Handler, specifically in the file application/forms/Comment.php. The manipulation leads to cross-site request forgery. ...
CVE-2022-4397
A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...
CVE-2022-4397: Incorrect Authorization
A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file application/forms/Comment.php of the component Comment Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack...
CVE-2022-4354
A vulnerability was found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /blog/comment of the component Message Board. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has be...
pb-cms 跨站脚本漏洞
pb-cms is a content management system by LinZhaoguan Personal Developer. A security vulnerability exists in version 2.0 of pb-cms, which originates from some unknown functions in the /blog/comment file of its Message Board component, allowing an attacker to implement cross-site scripting. The...
CVE-2022-4354: Improper Neutralization
A vulnerability was found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /blog/comment of the component Message Board. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has be...
puppetlabs-firewall: unmanaged rules could leave system in an unsafe state via duplicate comment
A flaw was found in the Puppet Firewall module. In certain situations, an unmanaged rule can exist on the target system that has the same comment as a rule specified in the manifest. When this condition is true, Puppet will ignore the unmanaged rule and continue to apply the rule in the manifest...
CVE-2022-36136
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...
Cross site scripting
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...
Cross-site Scripting (XSS)
backdrop/backdrop is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the comment section in the library, allowing an attacker to inject and execute malicious javascript...
ChurchCRM 跨站脚本漏洞
ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version 4.4.5 that stems from the presence of XSS, allowing an attacker to store XSS via Deposit Comment input...
PT-2022-23218 · Churchcrm · Churchcrm
Name of the Vulnerable Software and Affected Versions: ChurchCRM version 4.4.5 Description: The issue allows attackers to store XSS via location input Deposit Comment. This enables potential malicious activities through the exploitation of this input field. Recommendations: For ChurchCRM version...
CVE-2022-36136
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...
CVE-2022-36136: Improper Neutralization of Input During Web Page Generation
ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment...