16004 matches found
avo vulnerable to stored cross-site scripting (XSS) in key_value field
Summary A stored cross-site scripting XSS vulnerability was found in the keyvalue field of Avo v3.2.3. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the victim's browser. Details The value of the keyvalue is inserted directly into the HTML code. In the current...
GHSA-GHJV-MH6X-7Q6H avo vulnerable to stored cross-site scripting (XSS) in key_value field
Summary A stored cross-site scripting XSS vulnerability was found in the keyvalue field of Avo v3.2.3. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the victim's browser. Details The value of the keyvalue is inserted directly into the HTML code. In the current...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
DEBIAN-CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
Design/Logic Flaw
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
UBUNTU-CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
CVE-2023-48104
Alinto SOGo prior to 5.9.1 is vulnerable to an HTML Injection issue (CVE-2023-48104). Affected product: SOGo; vulnerable component/behavior is HTML injection in the web interface. CVSS v3.1 base score 6.1 (Medium) with Network attack vector, no privileges required, user interaction required, scop...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
SOGo Security Breach
SOGo is a very fast and scalable modern collaboration suite. It provides calendaring, address book management and a full-featured Webmail client as well as resource sharing and permission handling. A security vulnerability exists in SOGo version 5.8.0, which stems from an HTML injection...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
WordPress plugin EventON security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2024-14861 · WordPress · Eventon
Name of the Vulnerable Software and Affected Versions: EventON WordPress plugin versions prior to 2.2 Description: The issue allows high privilege users, such as admin, to perform Stored HTML Injection attacks even when the unfiltered html capability is disallowed, due to the plugin not sanitizin...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
PT-2024-13540 · Alinto +2 · Alinto Sogo +2
Name of the Vulnerable Software and Affected Versions: Alinto SOGo versions 5.8.0 through 5.9.0 Description: The issue is related to HTML Injection. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
Cross-site Scripting in JFinal
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML...
Cross site scripting
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML...
CVE-2024-22492
CVE-2024-22492 describes a stored XSS vulnerability in JFinalCMS 5.0.0. The issue is exploitable via the /gusetbook/save contact parameter, allowing remote attackers to inject arbitrary web script or HTML. The CVE entry notes a network-based vector with low attack complexity and requires user int...