CVE-2022-46088

CVE-2022-46088 affects Online Flight Booking Management System v1.0. Multiple connected sources report a cross-site scripting (XSS) vulnerability via the feedback form, caused by improper handling of user-supplied input. The descriptions consistently identify the feedback form as the entry point ...

PT-2024-11731 · Unknown · Online Flight Booking Management System

Name of the Vulnerable Software and Affected Versions: Online Flight Booking Management System version 1.0 Description: The Online Flight Booking Management System contains a cross-site scripting XSS issue via the feedback form. This allows for potential malicious script injection. No information...

CVE-2022-46088

Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the feedback form...

CVE-2024-1103

A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file profile.php of the component Feedback Form. The manipulation of the argument Your Feedback with the input leads to cross sit...

CVE-2024-1103 CodeAstro Real Estate Management System Feedback Form profile.php cross site scripting

A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file profile.php of the component Feedback Form. The manipulation of the argument Your Feedback with the input leads to cross sit...

PT-2024-16717 · Codeastro · Codeastro Real Estate Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System version 1.0 Description: A problematic issue was found in the CodeAstro Real Estate Management System, affecting some unknown functionality of the file profile.php of the component Feedback Form. The...

CodeAstro Real Estate Management System Cross-Site Scripting Vulnerability

CodeAstro Real Estate Management System is a real estate management system from CodeAstro. A cross-site scripting vulnerability exists in CodeAstro Real Estate Management System version 1.0, which stems from the fact that profile.php in the component Feedback Form. contains an unknown function th...

WordPress Plugin User Feedback - Create Interactive Feedback Form, User Surveys, and Polls in Seconds Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin User Feedback - Create...

MTN Group: String length restriction byepass at https://callerfeel.mtnonline.com/profile/feedback.html

Summary: Hi, hope you are well : I found that the attacker can bye pass the lenght restriction of user name at the feedback form Steps To Reproduce: F1823237 Impact Attacker can make the receiver page to delay and can cause application level dos Mitigation: Restrict the lenght of the string in...

OpenBMCS 2.4 Cross Site Request Forgery Vulnerability

OpenBMCS 2.4 CSRF Send E-mail Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your business, the OpenBMCS software has the ability to expand to hundreds of controllers. Our product c...

Judge.me : Blind XSS via Feedback form.

Summary: Hi Team, I found Blind XSS which is triggered on the admin panel. I was trying to add widgets on the installation page for default theme. When the installation was done, I saw a question like that Are you happy with how everything looks?. I clicked the No, please remove all widgets butto...

handironingservice.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-680524 Description| Value ---|--- Affected Website:| handironingservice.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

recoop.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-680509 Description| Value ---|--- Affected Website:| recoop.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rhossili.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-665196 Description| Value ---|--- Affected Website:| rhossili.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nymail.spray.se XSS vulnerability

Vulnerable URL: http://nymail.spray.se/feedbacknocookie.asp?Disabled=1"...

imagineit.com XSS vulnerability

Vulnerable URL: http://www.imagineit.com/frmfeedbackfree.asp?RequireLogin=False=1"...

channel4pick6.racecaller.com XSS vulnerability

Vulnerable URL: https://channel4pick6.racecaller.com/feedback Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...

zooplus.no XSS vulnerability

Vulnerable URL: http://www.zooplus.no/feedback/form/shop"onmouseover="prompt'XSSPOSED' Details: Description| Value ---|--- Patched:| Yes, at 23.03.2016 Latest check for patch:| 23.03.2016 13:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1191299 Google...

zooplus.hu XSS vulnerability

Vulnerable URL: http://www.zooplus.hu/feedback/form/shop"onmouseover="prompt'XSSPOSED' Details: Description| Value ---|--- Patched:| Yes, at 23.03.2016 Latest check for patch:| 23.03.2016 13:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 306333 Google...

zooplus.be XSS vulnerability

Vulnerable URL: http://www.zooplus.be/feedback/form/shop"onmouseover="prompt'XSSPOSED' Details: Description| Value ---|--- Patched:| Yes, at 23.03.2016 Latest check for patch:| 23.03.2016 13:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 144567 Google...