CVE-2021-28121

Virtual Robots.txt before 1.10 does not block HTML tags in the robots.txt field...

CVE-2021-28121

Virtual Robots.txt before 1.10 does not block HTML tags in the robots.txt field...

Design/Logic Flaw

Virtual Robots.txt before 1.10 does not block HTML tags in the robots.txt field...

CVE-2021-28121

CVE-2021-28121 affects the WordPress plugin Virtual Robots.txt (versions before 1.10). The root cause is lack of sanitization in the robots.txt field, allowing HTML tags to be stored and later reflected, with indications of authenticated stored XSS in public disclosures (e.g., WPEX/WPVulndb entri...

CVE-2021-28121

Virtual Robots.txt before 1.10 does not block HTML tags in the robots.txt field...

CVE-2021-28121: Undefined Security Weakness

Virtual Robots.txt before 1.10 does not block HTML tags in the robots.txt field...

PT-2021-17754

Name of the Vulnerable Software and Affected Versions: Virtual Robots.txt versions prior to 1.10 Description: The issue concerns the failure to block HTML tags in the robots.txt field. Recommendations: For versions prior to 1.10, update to version 1.10 or later to resolve the issue...

CVE-2021-28803: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

This issue affects: QNAP Systems Inc. Q'center versions prior to 1.11.1004...

CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

UBUNTU-CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

CVE-2020-27511

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

CVE-2020-27511: Undefined Security Weakness

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags...

PT-2021-11398

Name of the Vulnerable Software and Affected Versions: Prototype version 1.7.3 Description: An issue was discovered in the stripTags and unescapeHTML components where an attacker can cause a Regular Expression Denial of Service ReDOS through stripping crafted HTML tags. Recommendations: For...

Cross site scripting

In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other users profile information to include a cross-site scripting payload. The user data stored by the database includes HTML tags that are intentionally rendered out onto the page, and this can be abused to...

CVE-2020-26680: Improper Neutralization of Input During Web Page Generation

In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other users profile information to include a cross-site scripting payload. The user data stored by the database includes HTML tags that are intentionally rendered out onto the page, and this can be abused to...

Cross site scripting

HedgeDoc is a platform to write and share markdown. HedgeDoc before version 1.8.2 is vulnerable to a cross-site scripting attack using the YAML-metadata of a note. An attacker with write access to a note can embed HTML tags in the Open Graph metadata section of the note, resulting in the frontend...

CVE-2021-29503 Improper Neutralization of Script-Related HTML Tags in Notes

HedgeDoc is a platform to write and share markdown. HedgeDoc before version 1.8.2 is vulnerable to a cross-site scripting attack using the YAML-metadata of a note. An attacker with write access to a note can embed HTML tags in the Open Graph metadata section of the note, resulting in the frontend...

PT-2021-18258

Name of the Vulnerable Software and Affected Versions: HedgeDoc versions prior to 1.8.2 Description: The issue allows an attacker with write access to a note to embed HTML tags in the Open Graph metadata section, resulting in the frontend rendering the script tag as part of the head section. This...