16004 matches found
Cross site scripting
Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...
UBUNTU-CVE-2024-23817
Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...
CVE-2024-23817 Dolibarr Application Home Page HTML injection vulnerability
Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...
CVE-2024-23817
Dolibarr 18.0.4 is affected by an HTML injection vulnerability on the Home page. The issue allows injecting arbitrary HTML into the rendered page, enabling potential XSS via unsanitized user input in the Dolibarr application response. Root cause details in the connected documents indicate HTML in...
CVE-2024-23817 Dolibarr Application Home Page HTML injection vulnerability
Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...
CVE-2024-23817 Dolibarr Application Home Page HTML injection vulnerability
Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...
PT-2024-20098 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: Dolibarr version 18.0.4 Description: Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. The vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendered...
Dolibarr Security Breach
Dolibarr is a software application. A modern software package that helps manage your organization's activities. A security vulnerability exists in Dolibarr version 18.0.4, which stems from an HTML injection vulnerability in the application's home page that allows an attacker to inject arbitrary...
CVE-2024-22720
Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...
DEBIAN-CVE-2024-22720
Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...
Design/Logic Flaw
Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...
Html Injection
tuitse-tsusin is vulnerable to Html Injection. The vulnerability is due to the tuitsehtml function within html.py lacking proper escape or sanitization functionality for user-supplied data when incorporated into HTML output. This could allow attacker to inject malicious HTML or JavaScript code in...
PT-2024-19540 · Kanboard +1 · Kanboard +1
Name of the Vulnerable Software and Affected Versions: Kanboard version 1.2.34 Description: The issue concerns Html Injection in the group management feature. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incident...
CVE-2024-22720
Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...
CVE-2024-22720
Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...
CVE-2024-22720
Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...
CVE-2024-22720
Summary: CVE-2024-22720 affects Kanboard 1.2.34 and is described as an Html Injection vulnerability in the group management feature. The issue is confirmed in multiple feeds, with no explicit exploit details provided in the documents. CVSS metrics in the primary entry indicate a Medium impact wit...
CVE-2024-23341
TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese characters and Roman characters, and extracting sentences of the Taiwanese Chinese characters and the Roman characters. Prior to version 1.3.2, when using tuitsehtml without quoting the input, there is a html...
Input validation
TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese characters and Roman characters, and extracting sentences of the Taiwanese Chinese characters and the Roman characters. Prior to version 1.3.2, when using tuitsehtml without quoting the input, there is a html...
PYSEC-2024-22
TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese characters and Roman characters, and extracting sentences of the Taiwanese Chinese characters and the Roman characters. Prior to version 1.3.2, when using tuitsehtml without quoting the input, there is a html...