PT-2024-22257 · Hitron · Hitron Coda-4582

Name of the Vulnerable Software and Affected Versions: Hitron CODA-4582 2AHKM-CODA4589 version 7.2.4.5.1b8 Description: The issue allows a remote attacker within Wi-Fi proximity, who has access to the router admin panel, to conduct a DOM-based stored XSS attack. This attack can fetch remote...

BIT-MYBB-2020-15139

In MyBB before version 1.8.24, the custom MyCode BBCode for the visual editor doesn't escape input properly when rendering HTML, resulting in a DOM-based XSS vulnerability. The weakness can be exploited by pointing a victim to a page where the visual editor is active e.g. as a post or Private...

BIT-ABANTECART-2021-42050

An issue was discovered in AbanteCart before 1.3.2. It allows DOM Based XSS...

Cross site scripting

A DOM based cross-site scripting XSS vulnerability in the component /dom/ranges/Range-test-iframe.html of web-platform-tests/wpt before commit 938e843 allows attackers to execute arbitrary Javascript via sending a crafted URL...

Cross site scripting

A DOM based cross-site scripting XSS vulnerability in the component index.html of jstrieb/urlpages before commit 035b647 allows attackers to execute arbitrary Javascript via sending a crafted URL...

CVE-2024-26465: Improper Neutralization of Input During Web Page Generation

A DOM based cross-site scripting XSS vulnerability in the component /beep/Beep.Instrument.js of stewdio beep.js before commit ef22ad7 allows attackers to execute arbitrary Javascript via sending a crafted URL...

CVE-2024-26465

A DOM based cross-site scripting XSS vulnerability in the component /beep/Beep.Instrument.js of stewdio beep.js before commit ef22ad7 allows attackers to execute arbitrary Javascript via sending a crafted URL...

CVE-2024-26467

A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL...

PT-2024-21385 · Stwdio · Beep.Js

Name of the Vulnerable Software and Affected Versions: stwdio beep.js versions before commit ef22ad7 Description: A DOM based cross-site scripting XSS issue in the /beep/Beep.Instrument.js component allows attackers to execute arbitrary Javascript by sending a crafted URL. Recommendations: For...

CVE-2024-26467

A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL...

PT-2024-21387 · Tabatkins · Railroad-Diagrams

Name of the Vulnerable Software and Affected Versions: tabatkins/railroad-diagrams versions before commit ea9a123 Description: A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams allows attackers to execute arbitrary Javascript via...

CVE-2024-26465

A DOM-based cross-site scripting (XSS) vulnerability exists in the stwdio beep.js JavaScript toolkit (a browser-based synthesizer builder). The flaw is located in the /beep/Beep.Instrument.js component and affects versions prior to commit ef22ad7 . Attackers can exploit this by sending a speciall...

CVE-2024-26468: Improper Neutralization of Input During Web Page Generation

A DOM based cross-site scripting XSS vulnerability in the component index.html of jstrieb/urlpages before commit 035b647 allows attackers to execute arbitrary Javascript via sending a crafted URL...

CVE-2024-26467: Improper Neutralization of Input During Web Page Generation

A DOM based cross-site scripting XSS vulnerability in the component generator.html of tabatkins/railroad-diagrams before commit ea9a123 allows attackers to execute arbitrary Javascript via sending a crafted URL...

CVE-2024-26467

A DOM-based cross-site scripting (XSS) vulnerability exists in the tabatkins/railroad-diagrams library, specifically within the component generator.html file. The flaw allows an attacker to execute arbitrary JavaScript by providing a specially crafted URL . This issue affects versions prior to co...

CVE-2024-22289: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CyberNetikz Post views Stats post-views-stats allows DOM-Based XSS.This issue affects Post views Stats: from n/a through = 1.4.1...

CVE-2021-43584: Improper Neutralization of Input During Web Page Generation

DOM-based Cross Site Scripting XSS vulnerability in 'Tail Event Logs' functionality in Nagios Nagios Cross-Platform Agent NCPA before 2.4.0 allows attackers to run arbitrary code via the name element when filtering for a log...

CVE-2021-43584

Nagios Nagios Cross-Platform Agent (NCPA) prior to version 2.4.0 is affected by a DOM-based XSS in the Tail Event Logs functionality, exploitable via the name element when filtering logs. The root cause involves unsanitized input in the log-filtering path, leading to arbitrary code execution unde...

CVE-2023-51063

QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting XSS vulnerability within the component qnme-ajax?method=treelevel...

CVE-2023-51063

QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting XSS vulnerability within the component qnme-ajax?method=treelevel...