PT-2018-8374

Name of the Vulnerable Software and Affected Versions NetIQ Access Manager versions 4.2 through 4.2.3 NetIQ Access Manager versions 4.3 through 4.3.1 Description The issue allows cross-site scripting attacks due to an unescaped description field that could be specified by the provider...

CVE-2018-6878

Cross Site Scripting XSS exists in the review section in PHP Scripts Mall Hot Scripts Clone Script Classified 3.1 via the title or description field...

PT-2018-17798

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Hot Scripts Clone Script Classified version 3.1 Description A Cross Site Scripting XSS issue exists in the review section of the software, allowing exploitation via the title or description field. Recommendations For version...

netis WF2419 cross-site scripting vulnerability (CNVD-2018-03057)

Netis WF2419 is a wireless router product from China Tandan Network NETIS. A cross-site scripting vulnerability exists in the Netis WF2419 version 3.2.41381, which stems from the program's failure to adequately filter user-submitted data. The vulnerability can be exploited by a remote attacker to...

CVE-2018-6190

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

CVE-2018-6190

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

PT-2018-17395

Name of the Vulnerable Software and Affected Versions Netis WF2419 version 3.2.41381 Description The issue allows for XSS via the Description field on the MAC Filtering page. Recommendations For Netis WF2419 version 3.2.41381, consider restricting access to the MAC Filtering page until a fix is...

CVE-2018-6190: Improper Neutralization of Input During Web Page Generation

Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page...

Skybox Platform Cross-Site Scripting Vulnerability

Skybox PlatformAn enterprise-grade network security management platform from US-based Skybox Security. The platform features attack vector analysis, firewall management, vulnerability and threat management, and more. A cross-site scripting vulnerability exists in the title, Comments, or Descripti...

Webmin 'custom/run.cgi' Cross-Site Scripting Vulnerability

Webmin is a web-based system administration tool for Unix-like operating systems developed by Australian software developer Jamie Cameron and the Webmin community. A cross-site scripting vulnerability exists in Webmin versions prior to 1.870, which stems from the program's failure to filter...

CVE-2017-17089

custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality...

CVE-2017-17089

custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality...

PT-2017-14704

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.870 Description The issue allows remote authenticated administrators to conduct cross-site scripting XSS attacks. This is achieved by exploiting the description field in the custom command functionality of the...

CVE-2017-17089: Improper Neutralization of Input During Web Page Generation

custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality...

TP-LINK TL-MR3220 Cross-Site Scripting Vulnerability

TP-LINK TL-MR3220 wireless routers is a wireless router product from China P&L TP-LINK. A cross-site scripting vulnerability exists in the Wireless MAC Filtering page in the TP-LINK TL-MR3220 wireless router. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PT-2017-13972

Name of the Vulnerable Software and Affected Versions TP-LINK TL-MR3220 version affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability in the Wireless MAC Filtering page. This vulnerability allows remote attackers to inject arbitrary web scrip...

CVE-2017-15291: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220 wireless routers allows remote attackers to inject arbitrary web script or HTML via the Description field...

Cross site scripting

The dotCMS 4.1.1 application is vulnerable to Stored Cross-Site Scripting XSS affecting a vanity-urls Title field, a containers Description field, and a templates Description field...

CVE-2017-15219

The dotCMS 4.1.1 application is vulnerable to Stored Cross-Site Scripting XSS affecting a vanity-urls Title field, a containers Description field, and a templates Description field...

XSS in User Macros Description Field

We received external report about XSS in User Macros Field: quote The description field in User Macros is vulnerable to persistent XSS. The XSS will be executed when the user chooses the macro from the macro selector. quote Steps to reproduce: 1 Go to http://localhost:8090/admin/usermacros.action...