PT-2022-21304 · Softr · Softr

Name of the Vulnerable Software and Affected Versions: Softr version 2.0 Description: A Cross-Site Scripting XSS issue was found, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload. The vulnerability is exploited through the First Name parameter under the Create A N...

PT-2022-23847 · Sourcecodester · Sourcecodester Online Medicine Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Medicine Ordering System version 1.0 Description: A problematic issue was found in the system, affecting an unknown functionality of the file /omos/admin/?page=user/list. The manipulation of the First Name, Middle Name,...

CVE-2022-3587

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component My Account. The manipulation of the argument First Name leads to cross site scripting. The attack...

Simple Cold Storage Management System 跨站脚本漏洞

Simple Cold Storage Management System is a Simple Cold Storage Management System by Carlo Montero Personal Developer. A security vulnerability exists in SourceCodester Simple Cold Storage Management System version 1.0, which stems from a cross-site scripting attack due to an incorrect manipulatio...

Water-billing-management-system 跨站脚本漏洞

Water-billing-management-system is a water billing management system by Carlo Montero Personal Developer. A security vulnerability exists in Water-billing-management-system version 1.0, which originates from a /wbms/classes/Users.php?f=save, firstname stored cross-site scripting XSS attack...

Liferay Portal Vulnerable to XSS in Profile Search Functionality

Cross-site scripting XSS vulnerability in users.jsp in the Profile Search functionality in Liferay Portal Search Web before 1.0.3 from Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the FirstName field in the profile search functionality. An attacker can execute arbitrary web scripts or inject malicious HTML by submitting crafted input. Details Cross-site scripting or XSS is a code...

PT-2022-18443 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM version 7.11.23 Description: The issue allows remote code execution via a crafted payload injected into the FirstName text field. Recommendations: For SuiteCRM version 7.11.23, at the moment, there is no information about a newer...

PT-2022-11720 · Unknown · Chikista Patient Management

Name of the Vulnerable Software and Affected Versions: Chikista Patient Management Software version 2.0.2 Description: A Cross Site Scripting XSS issue exists in the first name parameter in several pages, including "patient/insert", "patient report", "appointment report", "visit report", and "bil...

CVE-2022-25015

A stored cross-site scripting XSS vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal cookies via a crafted payload inserted into the First Name field...

Apache Pluto 跨站脚本漏洞

Apache Pluto is a runtime environment for a set of Portlet containers from the Apache Foundation.Apache Pluto in version 3.1.0 has a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied and output data in the first name and last name fields. An...

Sugarcrm SugarCRM 跨站脚本漏洞

SugarCRM is a set of open source customer relationship management software . A cross-site scripting vulnerability exists in the Create Employee module of SugarCRM version 6.5.18. The vulnerability can be exploited to execute arbitrary web script or HTML via the "First Name" or "Last Name" input...

Online Doctor Appointment System 跨站脚本漏洞

Online Doctor Appointment System is an online doctor appointment system developed using PHP, JavaScript and CSS. A cross-site scripting vulnerability exists in Online Doctor Appointment System 1.0 that allows an authenticated attacker to execute arbitrary web script or HTML via a crafted payload ...

CVE-2021-24429

The Salon booking system WordPress plugin before 6.3.1 does not properly sanitise and escape the First Name field when booking an appointment, allowing low privilege users such as subscriber to set JavaScript in them, leading to a Stored Cross-Site Scripting XSS vulnerability. The Payload will th...

CVE-2021-24429

The Salon booking system WordPress plugin before 6.3.1 does not properly sanitise and escape the First Name field when booking an appointment, allowing low privilege users such as subscriber to set JavaScript in them, leading to a Stored Cross-Site Scripting XSS vulnerability. The Payload will th...

concerto 跨站脚本漏洞

concerto is an open source digital signage system. A security vulnerability exists in Concerto version 2.3.6 and prior versions that allows an unauthenticated, remote attacker to inject an XSS payload into the First Name or Last Name parameter during registration, which introduces arbitrary...

CVE-2021-30044

Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...

CVE-2021-30044

Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...

Courier Management System 跨站脚本漏洞

SourceCodester Courier Management System is an application program of SourceCodester. The system provides management functions. A cross-site scripting vulnerability exists in Courier Management System 1.0 that originates in the First Name field...

Monica cross-site scripting vulnerability (CNVD-2021-12658)

Monica is an open source personal relationship management system. A stored cross-site scripting vulnerability exists in the Contacts page in Monica 2.19.1. The vulnerability can be exploited to conduct a cross-site scripting attack via the First Name field...