13 matches found
CVE-2026-22674
Hashgraph Guardian prior to 3.5.0 is affected by a stored XSS vulnerability in the branding configuration API endpoint. The issue arises from unsanitized innerHTML in the branding service, allowing an authenticated user with the STANDARD_REGISTRY role to inject malicious scripts by submitting a c...
CVE-2025-68658 Open Source Point of Sale (opensourcepos) Stored XSS in Configuration (Information) – Company Name field
Open Source Point of Sale opensourcepos is a web based point of sale application written in PHP using CodeIgniter framework. opensourcepos 3.4.0 and 3.4.1 has a stored XSS vulnerability exists in the Configuration Information functionality. An authenticated user with the permission “Configuration...
CVE-2025-68658 Open Source Point of Sale (opensourcepos) Stored XSS in Configuration (Information) – Company Name field
Open Source Point of Sale opensourcepos is a web based point of sale application written in PHP using CodeIgniter framework. opensourcepos 3.4.0 and 3.4.1 has a stored XSS vulnerability exists in the Configuration Information functionality. An authenticated user with the permission “Configuration...
Open Source Point of Sale 跨站脚本漏洞
Open Source Point of Sale is an open source web-based point of sale system from opensourcepos. A cross-site scripting vulnerability exists in Open Source Point of Sale versions 3.4.0 and 3.4.1, which stems from a stored cross-site script in the configuration function that could cause an...
EUVD-2018-17456
Malware in sbrugna...
CVE-2023-1179
A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add Supplier Handler. The manipulation of the argument companyname/province/city/phonenumber leads to cross site...
CVE-2018-11200
An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field...
CVE-2018-11200
An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field...
Cross site scripting
An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field...
CVE-2018-11200: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field...
PHP Scripts Mall Basic B2B Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Basic B2B Script is a B2B website system script from PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Basic B2B Script version 2.0.0, which can be exploited by remote attackers to inject scripts via the First name, Last name, City, State, or...
NewsBee Cross-Site Scripting Vulnerability
NewsBee is a CMS Content Management System for news websites. A security vulnerability exists in NewsBee. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via the Company Name field...