X (Formerly Twitter): Html Injection and Possible XSS via MathML

Hi, I would like to report HTML Injection and possible cross site scripting XSS vulnerability using the MathML on Firefox. Account title of field is vulnerable to Html Injection which can lead an attacker to store javascript using the MathML in Firefox. Modern Firefox versions allow usage of inli...

PHP Scripts Mall PHP Appointment Booking Script Cross-Site Scripting Vulnerability

PHP Scripts Mall PHP Appointment Booking Script is a web based online appointment booking system by PHP Scripts Mall India. A cross-site scripting vulnerability exists in the user profile page in PHP Scripts Mall PHP Appointment Booking Script version 3.0.3, which can be exploited by attackers to...

Design/Logic Flaw

PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile...

CVE-2019-9066

PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile...

CVE-2019-9066

PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile...

CVE-2019-9066

The CVE-2019-9066 entry concerns PHP Scripts Mall PHP Appointment Booking Script 3.0.3, with a vulnerability described as HTML injection in the user profile page. Multiple connected sources (NVD entry and CNVD description) confirm the affected software and the form of the issue. The root cause is...

CVE-2018-18692

A reflected Cross-Site scripting XSS vulnerability in SEMCO Semcosoft 5.3 allows remote attackers to inject arbitrary web scripts or HTML via the username parameter to the Login Form...

CVE-2019-9066: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile...

The vulnerability of the Cisco Prime Network lifecycle management software allows a hacker to inject any HTML or JavaScript code into the loaded page.

The vulnerability of the Cisco Prime Network lifecycle management software is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to inject arbitrary HTML or JavaScript code into the uploaded page through a specially crafted link...

CVE-2018-20240

CVE-2018-20240 affects Atlassian Fisheye and Crucible prior to 4.7.0. The administrative linker functionality is vulnerable to stored XSS via the href parameter, enabling remote injection of arbitrary HTML/JavaScript. No exploitation details are provided beyond this description. Remediation: upgr...

CVE-2018-20241: Improper Neutralization of Input During Web Page Generation

The Edit upload resource for a review in Atlassian Fisheye and Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the wbuser parameter...

The vulnerability of the PAN-OS operating system arises from insufficient protection of the web page structure, allowing attackers to inject any desired JavaScript or HTML code into the loaded web page.

The vulnerability of the PAN-OS operating system exists due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code into the loaded web page from a remote location...

The vulnerability of the Web-Dorado plugin for Instagram Feed in the WordPress content management system allows a hacker to inject arbitrary web scripts or HTML code.

The vulnerability of the Web-Dorado plugin for Instagram Feed in the WordPress content management system is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web scripts or HTML code, there...

The vulnerability in the web interface of the operating system PAN-OS allows a hacker to inject any desired JavaScript or HTML code into the web page that is being uploaded.

The vulnerability of the PAN-OS operating system’s web interface exists due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code into the loaded web page from a remote location...

Design/Logic Flaw

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

CVE-2019-8361

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

CVE-2019-8361

The CVE-2019-8361 vulnerability affects PHP Scripts Mall’s Responsive Video News Script, where an XSS flaw in the Search Bar could enable HTML injection or URL redirection. Public details describe the vulnerability but do not provide exploit code, affected versions, or explicit remediation in the...

CVE-2019-8361

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

CVE-2019-8361: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Responsive Video News Script has XSS via the Search Bar. This might, for example, be leveraged for HTML injection or URL redirection...

Cross-site Scripting (XSS)

onebox is susceptible to cross-site scripting XSS. The attack exists because it does not escape the albumtitle parameter, allowing the attacker to inject malicious HTML through it...