CVE-2025-2975

A vulnerability was found in GFI KerioConnect 10.0.6 and classified as problematic. This issue affects some unknown processing of the file Settings/Email/Signature/EditHtmlSource of the component Signature Handler. The manipulation leads to cross site scripting. The attack may be initiated...

PT-2017-6264

Name of the Vulnerable Software and Affected Versions Pluck CMS version 4.7.2 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML. This is possible via the "edit HTML source" option. Recommendations For Pluck CMS version...

CVE-2014-8707: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote authenticated users to inject arbitrary web script or HTML via the "edit HTML source" option...