675 matches found
CVE-2025-44110
FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...
CVE-2025-44110
FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...
CVE-2025-44110
FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...
Fluxbb 安全漏洞
Fluxbb is a Php-based forum system organized by Fluxbb. A security vulnerability exists in Fluxbb version 1.5.11, which stems from the Forum Description Field in adminforums.php being vulnerable to cross-site scripting attacks...
CVE-2025-44110
FluxBB version 1.5.11 is vulnerable to a Cross Site Scripting (XSS) flaw located in the Forum Description Field within the admin_forums.php page. This vulnerability allows for the potential execution of malicious scripts in the context of the user's browser. To remediate this, users should update...
CVE-2025-44110: Improper Neutralization of Input During Web Page Generation
FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...
CVE-2025-44110
FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...
CVE-2024-52281 Stored Cross-site Scripting vulnerability in Rancher UI
A: Improper Neutralization of Input During Web Page Generation vulnerability in SUSE rancher allows a malicious actor to perform a Stored XSS attack through the cluster description field. This issue affects rancher: from 2.9.0 before 2.9.4...
CVE-2024-52281 Stored Cross-site Scripting vulnerability in Rancher UI
A: Improper Neutralization of Input During Web Page Generation vulnerability in SUSE rancher allows a malicious actor to perform a Stored XSS attack through the cluster description field. This issue affects rancher: from 2.9.0 before 2.9.4...
CVE-2024-52281: Improper Neutralization of Input During Web Page Generation
A: Improper Neutralization of Input During Web Page Generation vulnerability in SUSE rancher allows a malicious actor to perform a Stored XSS attack through the cluster description field. This issue affects rancher: from 2.9.0 before 2.9.4...
CVE-2025-26054
Infinxt iEdge 100 2.1.32 is vulnerable to Cross Site Scripting XSS via the "Description" field during LAN configuration...
CVE-2025-26054
Infinxt iEdge 100 2.1.32 is vulnerable to Cross Site Scripting XSS via the "Description" field during LAN configuration...
CVE-2025-26054: Improper Neutralization of Input During Web Page Generation
Infinxt iEdge 100 2.1.32 is vulnerable to Cross Site Scripting XSS via the "Description" field during LAN configuration...
CVE-2024-7990
A stored cross-site scripting XSS vulnerability exists in open-webui/open-webui version 0.3.8. The vulnerability is present in the /api/v1/models/add endpoint, where the model description field is improperly sanitized before being rendered in chat. This allows an attacker to inject malicious...
Open WebUI stored cross-site scripting (XSS) vulnerability
A stored cross-site scripting XSS vulnerability exists in open-webui/open-webui version 0.3.8. The vulnerability is present in the /api/v1/models/add endpoint, where the model description field is improperly sanitized before being rendered in chat. This allows an attacker to inject malicious...
GHSA-GJ27-76GQ-5V3P Open WebUI stored cross-site scripting (XSS) vulnerability
A stored cross-site scripting XSS vulnerability exists in open-webui/open-webui version 0.3.8. The vulnerability is present in the /api/v1/models/add endpoint, where the model description field is improperly sanitized before being rendered in chat. This allows an attacker to inject malicious...
CVE-2024-7990
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-10722
A stored cross-site scripting XSS vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability allows attackers to inject malicious scripts into the 'Description' field of custom fields in the 'IP RELATED MANAGEMENT' section. This can lead to data theft, account compromise, distributi...
CVE-2024-7990 Stored Cross-Site Scripting in open-webui/open-webui
A stored cross-site scripting XSS vulnerability exists in open-webui/open-webui version 0.3.8. The vulnerability is present in the /api/v1/models/add endpoint, where the model description field is improperly sanitized before being rendered in chat. This allows an attacker to inject malicious...