92 matches found
PT-2025-25157 · Adobe · Experience Manager
Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: The issue is a DOM-based Cross-Site Scripting XSS vulnerability that can be exploited by manipulating the DOM environment to execute malicious JavaScript within the context of...
CVE-2024-26468
A DOM based cross-site scripting XSS vulnerability in the component index.html of jstrieb/urlpages before commit 035b647 allows attackers to execute arbitrary Javascript via sending a crafted URL...
CVE-2024-26465
A DOM based cross-site scripting XSS vulnerability in the component /beep/Beep.Instrument.js of stewdio beep.js before commit ef22ad7 allows attackers to execute arbitrary Javascript via sending a crafted URL...
CVE-2023-50808
Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI...
CVE-2023-2614
Cross-site Scripting XSS - DOM in GitHub repository pimcore/pimcore prior to 10.5.21...
CVE-2023-0741
Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2022-2729
Cross-site Scripting XSS - DOM in GitHub repository openemr/openemr prior to 7.0.0.1...
CVE-2025-48368
Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a DOM-based Cross-Site Scripting XSS vulnerability exists in the GroupOffice application, allowing attackers to execute arbitrary JavaScript code in the context of the victim'...
DOM 安全漏洞
DOM is a DOM interface open-sourced by PHP.GT. A security vulnerability exists in DOM versions prior to 4.1.8, which stems from the exposure of GITHUBTOKEN in the Dom workflow runtime product...
PT-2025-19986 · Phpgt/Dom · Phpgt/Dom
Name of the Vulnerable Software and Affected Versions: phpgt/Dom versions prior to 4.1.8 Description: The issue exposes the GITHUB TOKEN in the Dom workflow run artifact. This occurs because the ci.yml workflow file uses actions/upload-artifact@v4 to upload the build artifact, which is a zip of t...
CVE-2024-43724
Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user inpu...
CVE-2024-43720
Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting XSS vulnerability that could be exploited to execute arbitrary code in the context of the victim's browser session. By manipulating the DOM environment in the victim's browser, an attacker can...
CVE-2024-43722
CVE-2024-43722 affects Adobe Experience Manager (AEM) 6.5.21 and earlier with a DOM-based XSS flaw. An attacker can inject scripts by manipulating a DOM element via a crafted URL or input, requiring user interaction, potentially executing arbitrary code in the victim’s browser. Affected product/v...
PT-2024-15948 · Langchain Ai · Chat-Langchain
Name of the Vulnerable Software and Affected Versions: langchain-ai/chat-langchain versions prior to 0.0.0 Description: The issue is related to Cross-site Scripting XSS - DOM. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents wher...
PYSEC-2023-216
Cross-site Scripting XSS - DOM in GitHub repository modoboa/modoboa prior to 2.2.2...
CVE-2023-2343 Cross-site Scripting (XSS) - DOM in pimcore/pimcore
Cross-site Scripting XSS - DOM in GitHub repository pimcore/pimcore prior to 10.5.21...
CVE-2023-0741 Cross-site Scripting (XSS) - DOM in answerdev/answer
Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...
PT-2023-16398 · Unknown · Microweber
Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 1.3.2 Description: The issue is related to Cross-site Scripting XSS - DOM, which allows an attacker to execute malicious scripts in the browser. This can lead to unauthorized access to sensitive...
CVE-2022-23475 dalorRadius full account take over
daloRADIUS is an open source RADIUS web management application. daloRadius 1.3 and prior are vulnerable to a combination cross site scripting XSS and cross site request forgery CSRF vulnerability which leads to account takeover in the mng-del.php file because of an unescaped variable reflected in...