Active Super Shop CMS v2.5 - HTML Injection Vulnerabilities

Exploit Title: Active Super Shop CMS v2.5 - HTML Injection Vulnerabilities References Source: https://www.vulnerability-lab.com/getcontent.php?id=2278 Release Date: 2023-07-04 Vulnerability Laboratory ID VL-ID: 2278 Common Vulnerability Scoring System: 5.4 Product & Service Introduction:...

Cisco Small Business SPA500 Series IP Phones Web UI Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS or HTML injection attacks. For more information about these vulnerabilities, see the Details "details"...

LinkedIn: HTML injection at Company Name or Product Name and can be shown on Contact Sales form

A vulnerability was discovered that allowed HTML injection into the company name and product name fields on a contact sales form. Attackers could exploit this to conduct phishing attacks or distribute malware. The issue was addressed...

Active Super Shop CMS 2.5 HTML Injection

Document Title: =============== Active Super Shop CMS v2.5 - HTML Injection Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2278 Release Date: ============= 2023-07-04 Vulnerability Laboratory ID VL-ID: ==================================...

CVE-2021-37386

Furukawa Electric LatAm 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 were discovered to contain an HTML injection vulnerability via the serial number update function...

CVE-2021-37386

Furukawa Electric LatAm 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 were discovered to contain an HTML injection vulnerability via the serial number update function...

CVE-2021-37386

Furukawa Electric LatAm 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 were discovered to contain an HTML injection vulnerability via the serial number update function...

Design/Logic Flaw

Furukawa Electric LatAm 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 were discovered to contain an HTML injection vulnerability via the serial number update function...

ordernow.applova.io Cross Site Scripting vulnerability OBB-3525264

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-37386

Affected products: Furukawa Electric LatAm 423-41W/AC (pre-1.1.4) and LD421-21W (pre-1.3.3). Issue: HTML injection via the serial number update function (CVE-2021-37386). Root cause / vector: HTML injection vulnerability in the serial number update feature. Impact (as stated): Confidentiality, in...

Furukawa Electric 423-41W/AC 跨站脚本漏洞

The Furukawa Electric 423-41W/AC is a wireless router from Furukawa Electric Japan. A cross-site scripting vulnerability exists in the Furukawa Electric 423-41W/AC v1.1.4 prior and LD421-21W v1.3.3 prior, which stems from an HTML injection vulnerability via the serial number update feature...

CVE-2021-37386

Furukawa Electric LatAm 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 were discovered to contain an HTML injection vulnerability via the serial number update function...

CVE-2021-37386

Furukawa Electric LatAm 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 were discovered to contain an HTML injection vulnerability via the serial number update function...

PT-2023-12318 · Furukawa Electric · Furukawa Electric Latam Ld421-21W +1

Name of the Vulnerable Software and Affected Versions: Furukawa Electric LatAm 423-41W/AC versions prior to 1.1.4 Furukawa Electric LatAm LD421-21W versions prior to 1.3.3 Description: The issue is related to an HTML injection vulnerability via the serial number update function. This vulnerabilit...

Bigware Shop 2.3 Cross Site Scripting

==================================================================================================================================== | Title : Bigware Shop v2.3 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.264-bit | | Vendor :...

CVE-2023-37786

Multiple cross-site scripting XSS vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Mail Settingsbackend, Mail Settingshost, Mail Settingsport and Mail Settingsauth parameters of the /admin/configuration.php...

CVE-2023-29452

Currently, geomap configuration Administration - General - Geographical maps allows using HTML in the field “Attribution text” when selected “Other” Tile provider...

CVE-2023-29452

Currently, geomap configuration Administration - General - Geographical maps allows using HTML in the field “Attribution text” when selected “Other” Tile provider...

CVE-2023-2200

An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attacker to inject HTML in an email address field...

CVE-2023-2200

An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attacker to inject HTML in an email address field...