5 matches found
CVE-2018-7741
Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI...
6.1CVSS6.1AI score0.00652EPSS
SaveExploits1References1
Cross site scripting
Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter...
4.3CVSS5.9AI score0.00652EPSS
SaveExploits1References1Affected Software1
Cross site scripting
Eramba e1.0.6.033 has Reflected XSS on the Error page of the CSV file inclusion tab of the /importTool/preview URI, with a CSV file polluted with malicious JavaScript...
4.3CVSS6AI score0.00598EPSS
SaveExploits1References1Affected Software1
Cross site scripting
Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI...
4.3CVSS6AI score0.00652EPSS
SaveExploits1References1Affected Software1
CVE-2018-7741: Improper Neutralization of Input During Web Page Generation
Eramba e1.0.6.033 has Reflected XSS in the Date Filter via the created parameter to the /crons URI...
6.1CVSS6.3AI score0.00652EPSS
SaveExploits1References2
20