Mail.ru: Stored Xss

Stored XSS in comment functionality on profile.my.games and community.my.games...

WordPress wp_ajax_replyto_comment ajax-actions.php wpHandleCommentSubmission comment.php Information Disclosure

The vulnerability of the wpajaxreplytocomment function in ajax-actions.php and the wpHandleCommentSubmission function in comment.php of the WordPress content management system is related to insufficient validation of the requests being executed. Exploiting this vulnerability could allow an attack...

CVE-2020-15597

SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field...

CVE-2020-15597

SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field...

Cross site scripting

SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field...

CVE-2020-15597

SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field...

PT-2020-14522

Name of the Vulnerable Software and Affected Versions SOPlanning version 1.46.01 Description The issue allows for persistent XSS attacks through specific fields, including the Project Name, Statutes Comment, Places Comment, or Resources Comment field. Recommendations For SOPlanning version 1.46.0...

CVE-2020-15597: Improper Neutralization of Input During Web Page Generation

SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field...

Atlassian Jira < 7.6.17 / 7.7.x < 7.13.9 / 8.0.x < 8.4.2 Information Disclosure

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.6.17, or 7.7.x prior to 7.13.9, or version 8.0.x prior to 8.4.2. It is, therefore, affected by a Information Disclosure vulnerability. - A remote attackers to view sensitive...

Munkireport comment cross-site scripting vulnerability

Munkireport is a reporting tool for the Munki software management program. comment is one of the comment modules. A cross-site scripting vulnerability exists in MunkiReport for comments prior to version 4.0. A remote attacker can exploit this vulnerability by posting a new comment to inject...

CVE-2020-15885

This CVE concerns MunkiReport’s comment module prior to version 4.0, where a Cross-Site Scripting (XSS) vulnerability exists. The issue allows remote attackers to inject arbitrary web script or HTML by posting a new comment, with the potential to affect users who view comments. The available conn...

CVE-2020-15885

A Cross-Site Scripting XSS vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment...

CVE-2020-15885

A Cross-Site Scripting XSS vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment...

CVE-2020-15885: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment...

PT-2020-14686

Name of the Vulnerable Software and Affected Versions MunkiReport versions prior to 4.0 Description A Cross-Site Scripting XSS issue exists in the comment module, allowing remote attackers to inject arbitrary web script or HTML by posting a new comment. Recommendations For versions prior to 4.0,...

PT-2020-22662

Name of the Vulnerable Software and Affected Versions VIPS affected versions not specified Description The issue is related to a stack buffer overflow error. Technical details about the crash include the write png comment function, vips slist map2 function, and vips image map function...

U.S. Dept Of Defense: Stored XSS via Comment Form at ████████

Summary: An attacker can submit a comment form with injected HTML, leading to a number of malicious effects Step-by-step Reproduction Instructions 1. Browse to https://████ 2. Complete the form. I placed " in the Name field. Some example payloads for the Comments field are as follows: For...

CVE-2019-20410

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0...

CVE-2019-20410

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0...

CVE-2019-20410: Undefined Security Weakness

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0...