CVE-2025-28015

A HTML Injection vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary HTML code via the fname, lname, and contact parameters...

CVE-2025-28015

A HTML Injection vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary HTML code via the fname, lname, and contact parameters...

CVE-2025-28015

A HTML Injection vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary HTML code via the fname, lname, and contact parameters...

PT-2025-11190

Name of the Vulnerable Software and Affected Versions: PHPGurukul User Registration & Login and User Management System version V3.3 Description: A HTML Injection issue was found in the loginsystem/edit-profile.php file, allowing remote attackers to execute arbitrary HTML code via the fname, lname...

CVE-2025-28015: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A HTML Injection vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary HTML code via the fname, lname, and contact parameters...

CVE-2025-28015

The PHPGurukul User Registration & Login and User Management System V3.3 is affected by an HTML Injection vulnerability in the loginsystem/edit-profile.php component. This flaw occurs because the application fails to properly neutralize script-related HTML tags, allowing remote attackers to execu...

CVE-2024-34398

An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers...

CVE-2024-34398

An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers...

BMC Remedy Mid Tier security vulnerability

BMC Remedy Mid Tier is an application from BMC USA, Inc. It is used to act as a client for the Remedy AR System server and a server for the browser. A security vulnerability exists in BMC Remedy Mid Tier version 7.6.04 that originates from allowing an authenticated, remote attacker to perform...

CVE-2024-34398

An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers...

CVE-2024-34398

An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers...

CVE-2024-34398: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers...

MFlash secure data exchange platform Code Execution

The vulnerability of the MFlash secure messaging platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the administration panel by injecting specially crafted HTML code...

CVE-2024-34398

The BMC Remedy Mid Tier version 7.6.04 is vulnerable to stored HTML Injection (CWE-80). An authenticated remote attacker can exploit this issue to inject malicious HTML code into the web application. To mitigate this risk, it is recommended to restrict access to the web application until a patch ...

PT-2025-11110

Name of the Vulnerable Software and Affected Versions: BMC Remedy Mid Tier version 7.6.04 Description: The web application in BMC Remedy Mid Tier allows stored HTML Injection by authenticated remote attackers. Recommendations: For BMC Remedy Mid Tier version 7.6.04, consider restricting access to...

Froxlor has an HTML Injection Vulnerability

Summary An HTML Injection vulnerability in the customer account portal allows an attacker to inject malicious HTML payloads in the email section. This can lead to phishing attacks, credential theft, and reputational damage by redirecting users to malicious external websites. The vulnerability has...

GHSA-26XQ-M8XW-6373 Froxlor has an HTML Injection Vulnerability

Summary An HTML Injection vulnerability in the customer account portal allows an attacker to inject malicious HTML payloads in the email section. This can lead to phishing attacks, credential theft, and reputational damage by redirecting users to malicious external websites. The vulnerability has...

CVE-2025-25925: Improper Neutralization of Input During Web Page Generation

A stored cross-scripting XSS vulnerability in Openmrs v2.4.3 Build 0ff0ed allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the personName.middleName parameter at /openmrs/admin/patients/shortPatientForm.form...

PT-2025-23501 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: Froxlor versions prior to 2.2.6 Description: The issue is an HTML Injection vulnerability in the customer account portal, allowing an attacker to inject malicious HTML payloads in the email section. This can lead to phishing attacks, credenti...

Cross-Site Scripting (XSS)

Seajs is vulnerable to Cross-Site Scripting. The vulnerability is due to improper input sanitization in the seajs package, allowing users to inject scriptless HTML tags with unsanitized name attributes...