CVE-2022-25979

Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting XSS due to improper user-input sanitization in the Editor function...

CVE-2022-25979: Improper Neutralization of Input During Web Page Generation

Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting XSS due to improper user-input sanitization in the Editor function...

Jsuites 跨站脚本漏洞

Jsuites is a set of lightweight, commonly used javascript web components. A security vulnerability exists in Jsuites versions prior to 5.0.1, which stems from an improper sanitization of user input in its Editor function that allows an attacker to implement cross-site scripting...

Cross-site Scripting (XSS)

Overview jsuites is a jSuites is a collection of lightweight common required javascript plugins and web components. It is composed of fully responsive vanilla plugins to help you bring the best user experience to your projects, independent of the platform. Affected versions of this package are...

CVE-2022-30429

Multiple cross-site scripting XSS vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in versions 3.3.29 and 8.0.1 and could also ...

PT-2022-20114 · Neos Cms · Neos Cms

Name of the Vulnerable Software and Affected Versions: Neos CMS versions 3.3.29 through 8.0.1 Description: Multiple cross-site scripting XSS vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion o...

CVE-2022-30429: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in versions 3.3.29 and 8.0.1 and could also ...