CVE-2021-32244: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Moodle 3.10.3 allows remote attackers to execute arbitrary web script or HTML via the "Description" field...

CVE-2021-27933: Improper Neutralization of Input During Web Page Generation

pfSense 2.5.0 allows XSS via the serviceswoledit.php Description field...

PT-2021-17677

Name of the Vulnerable Software and Affected Versions: pfSense version 2.5.0 Description: The issue allows for stored Cross-Site Scripting XSS via the Description field in the services wol edit.php file. Recommendations: For pfSense version 2.5.0, update to a version that includes a fix for this...

TYPO3 跨站脚本漏洞

TYPO3 is a free and open source content management system written in PHP under the GNU General Public License. A cross-site scripting vulnerability exists in the database field used as descriptionColumn in TYPO3 versions prior to 10.4.14, 11.1.1. No detailed vulnerability details are available at...

CVE-2021-27371

The Contact page in Monica 2.19.1 allows stored XSS via the Description field...

CVE-2021-27371

The Contact page in Monica 2.19.1 allows stored XSS via the Description field...

Cross site scripting

The Contact page in Monica 2.19.1 allows stored XSS via the Description field...

CVE-2021-27371

The Contact page in Monica 2.19.1 allows stored XSS via the Description field...

CVE-2021-27371

The Contact page in Monica 2.19.1 allows stored XSS via the Description field...

CVE-2021-27371

CVE-2021-27371 affects Monica 2.19.1: a stored XSS vulnerability on the Contact page via the Description field. The available sources confirm the vulnerability exists in Monica 2.19.1 and is triggered through input in the Description field; the root cause is not explicitly described in the provid...

Monica 跨站脚本漏洞

Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the Description field...

PT-2021-17418

Name of the Vulnerable Software and Affected Versions Monica version 2.19.1 Description The issue allows stored XSS via the Description field on the Contact page. Recommendations For Monica version 2.19.1, update to a version that fixes this issue to prevent stored XSS attacks...

CVE-2021-27371: Improper Neutralization of Input During Web Page Generation

The Contact page in Monica 2.19.1 allows stored XSS via the Description field...

CVE-2019-16268

Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on the Admin - User Administration userMgmt.do?actionToCall=ShowUser screen...

Design/Logic Flaw

Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on the Admin - User Administration userMgmt.do?actionToCall=ShowUser screen...

CVE-2019-16268

Zoho ManageEngine Remote Access Plus 10.0.259 is affected by an HTML injection vulnerability in the Admin - User Administration screen (userMgmt.do?actionToCall=ShowUser). The issue concerns the Description field and is documented across multiple sources (NVD, Red Hat advisory, CNVD). No exploit ...

CVE-2019-16268

Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on the Admin - User Administration userMgmt.do?actionToCall=ShowUser screen...

CVE-2019-16268: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Remote Access Plus 10.0.259 allows HTML injection via the Description field on the Admin - User Administration userMgmt.do?actionToCall=ShowUser screen...

PT-2021-8990

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Remote Access Plus version 10.0.259 Description The issue allows HTML injection via the Description field on the Admin - User Administration userMgmt.do?actionToCall=ShowUser screen. Recommendations For Zoho ManageEngine Remo...

Composr CMS Cross-Site Scripting Vulnerability

Ocproducts Composr CMS is an open source content management system CMS written in PHP by ocProducts UK. Composr CMS 10.0.34 suffers from a cross-site scripting vulnerability that can be exploited by a remote attacker to insert arbitrary web script or HTML by adding a banner to the description fie...