383 matches found
CVE-2024-25151
CVE-2024-25151 affects Liferay Portal 7.2.0–7.4.2 and Liferay DXP 7.3 before SP3, 7.2 before FP15, and older versions. The Calendar module does not escape user-supplied data in the default notification email template, enabling remote authenticated users to inject script/HTML via the calendar even...
CVE-2024-25151: Improper Neutralization of Input During Web Page Generation
The Calendar module in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions does not escape user supplied data in the default notification email template, which allows remote...
CVE-2024-23761
Server Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template...
Sql injection
Server Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template...
CVE-2024-23761
Server Side Template Injection in Gambio 4.9.2.0 allows attackers to run arbitrary code via crafted smarty email template...
CVE-2024-23761
CVE-2024-23761 affects Gambio, specifically version 4.9.2.0 (and prior per CNNVD/CNNVD-like sources), where a Server Side Template Injection via a crafted smarty email template allows an attacker to execute arbitrary code. The issue is described consistently across Red Hat, NVD, CVE listings, and...
Gambio Code Issue Vulnerability
Gambio is an all-in-one e-commerce solution from Gambio, Inc. A code issue vulnerability exists in Gambio 4.9.2.0 and prior versions that stems from allowing an attacker to run arbitrary code via a crafted smarty email template...
CVE-2024-0601
A vulnerability was found in ZhongFuCheng3y Austin 1.0. It has been rated as critical. Affected by this issue is the function getRemoteUrl2File of the file src\main\java\com\java3y\austin\support\utils\AustinFileUtils.java of the component Email Message Template Handler. The manipulation leads to...
UBUNTU-CVE-2023-3726
OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting...
Cross site scripting
OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting...
CVE-2023-3726
OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting...
CVE-2023-3726 OCSInventory-ocsreports 2.12.0 - Stored cross-site Scripting
OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting...
CVE-2023-3726 OCSInventory-ocsreports 2.12.0 - Stored cross-site Scripting
OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting...
CVE-2023-3726: Improper Neutralization of Input During Web Page Generation
OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting...
Cross site scripting
IDURAR aka idurar-erp-crm through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data...
CVE-2023-52265
CVE-2023-52265 affects IDURAR (idurar-erp-crm)
CVE-2023-52265
IDURAR aka idurar-erp-crm through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data...
IDURAR ERP/CRM Cross-Site Scripting Vulnerability
IDURAR ERP/CRM is an open source content management system from the individual developer Salah Eddine Lalami. A cross-site scripting vulnerability exists in IDURAR ERP/CRM 2.0.1 and prior versions, which originates from the ability to execute cross-site scripting via the Edit Email Template featu...
CVE-2023-52265: Improper Neutralization of Input During Web Page Generation
IDURAR aka idurar-erp-crm through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in the /api/email/update data...
GitLab Security Breach
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab that stems from the possibility of...