4 matches found
CVE-2026-18328: Improper Neutralization of Input During Web Page Generation
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via the 'errordescription' parameter in all versions up to, and including, 1.57.0 due to insufficient input sanitization and output escaping. This...
CVE-2024-41591: Improper Neutralization of Input During Web Page Generation
DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS...
CVE-2023-51063: Improper Neutralization of Input During Web Page Generation
QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting XSS vulnerability within the component qnme-ajax?method=treelevel...
CVE-2023-51064: Improper Neutralization of Input During Web Page Generation
QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerability within the component qnme-ajax?method=treetable...