Wix cross-site scripting vulnerabilities

Wix is a website building platform provided by the Israeli company Wix. Wix has a cross-site scripting vulnerability, which stems from the improper cleanup of content by the endpoint responsible for uploading SVG images. This vulnerability may lead to reflective cross-site scripting attacks...

Podcast Generator Cross-Site Script Vulnerability

Podcast Generator is an open source set of free podcast publishing scripts written in PHP by PodcastGenerator. A cross-site scripting vulnerability exists in Podcast Generator version 3.2.9, which stems from improper Freebox content field cleanup and could lead to a stored cross-site scripting...

WBCE CMS Cross-Site Scripting Vulnerability

WBCE CMS is WBCE CMS open source a set of PHP and MySQL based open source content management system CMS. A cross-site scripting vulnerability exists in WBCE CMS version 1.6.1, which stems from improper cleanup of content parameters in the WYSIWYG editor and could lead to a stored cross-site...

Trix security vulnerabilities

Trix is a Basecamp open source rich text editor for everyday writing. A security vulnerability exists in versions prior to Trix 2.1.1 that stems from improper cleanup of pasted content...

ViewerJS security vulnerability

Viewer.js is a JavaScript image viewer by the individual developer Fengyuan Chen. A security vulnerability exists in ViewerJS version 0.5.8, which stems from a failure to properly clean up content loaded via URL tags and can lead to open redirects...

Smartertools SmarterTools SmarterMail cross-site scripting vulnerabilities

Smartertools SmarterTools SmarterMail is a set of mail server software from SmarterTools Smartertools, USA. The program supports spam filtering, statistics, simple mail transfer protocol SMTP authentication and other features. A security vulnerability exists in SmarterTools SmarterMail versions...