Cross site scripting

Tad Book3 editing book function does not filter special characters. Unauthenticated attackers can remotely inject JavaScript syntax and execute stored XSS attacks...

Cross site scripting

Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...

CVE-2020-21434

CVE-2020-21434 affects Maccms 10. The vulnerability is a cross-site scripting (XSS) flaw in the Editing function under the Member module, exploitable via a crafted payload in the nickname field. Root cause: lack of proper input validation allowing script execution. Impact: client-side code execut...

CVE-2020-21434: Improper Neutralization of Input During Web Page Generation

Maccms 10 contains a cross-site scripting XSS vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field...

CVE-2021-20683

Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...

CVE-2021-20681

Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...

PT-2021-14140

Name of the Vulnerable Software and Affected Versions: baserCMS versions prior to 4.4.5 Description: The issue is related to improper neutralization of JavaScript input in the page editing function, allowing remote authenticated attackers to inject an arbitrary script via unspecified vectors...

CVE-2021-22849 Hyweb HyCMS-J1 - Stored XSS

Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syntax to perform a stored XSS Stored Cross-site scripting attack...

PT-2021-15222

Name of the Vulnerable Software and Affected Versions Hyweb HyCMS-J1 affected versions not specified Description The backend editing function of Hyweb HyCMS-J1 does not filter special characters, allowing users who are logged in to inject JavaScript syntax and perform a stored XSS Stored Cross-si...

CVE-2021-22849: Improper Neutralization of Input During Web Page Generation

Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syntax to perform a stored XSS Stored Cross-site scripting attack...