Active Matrimonial CMS 1.4 HTML Injection

==================================================================================================================================== | Title : Active Matrimonial CMS v 1.4 HTML inject Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2...

GHSA-M3V5-GJJ9-RG24 Craft CMS vulnerable to HTML injection

Craft CMS through 4.4.9 is vulnerable to HTML Injection...

Craft CMS vulnerable to HTML injection

Craft CMS through 4.4.9 is vulnerable to HTML Injection...

CVE-2023-33495

Craft CMS through 4.4.9 is vulnerable to HTML Injection...

CVE-2023-33495

Craft CMS through 4.4.9 is vulnerable to HTML Injection...

Design/Logic Flaw

Craft CMS through 4.4.9 is vulnerable to HTML Injection...

CVE-2023-33495

Craft CMS through 4.4.9 is vulnerable to HTML Injection...

CVE-2023-33495

Craft CMS through 4.4.9 is vulnerable to HTML Injection...

CVE-2023-33495

CVE-2023-33495 affects Craft CMS up to version 4.4.9, where an HTML Injection vulnerability exists in the CMS (the exact root cause is described only as HTML Injection in the sources). Impact is described as enabling injection of HTML content, with a CVSS v3.1 base score of 6.1 (Medium). The avai...

PT-2023-24364 · Craft Cms · Craft Cms

Name of the Vulnerable Software and Affected Versions: Craft CMS versions through 4.4.9 Description: The issue is related to HTML Injection. Recommendations: For versions through 4.4.9, update to a version later than 4.4.9 to resolve the issue...

Pixel＆tonic Craft CMS 跨站脚本漏洞

Pixel & tonic Craft CMS is a content management system CMS from Pixel & tonic USA. A security vulnerability exists in Craft CMS 4.4.9 and earlier versions, which stems from vulnerability to HTML injection attacks...

CVE-2023-33495

Craft CMS through 4.4.9 is vulnerable to HTML Injection...

Privilege escalation

Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file. NOTE: the product's security model is that users are trusted by the...

CVE-2023-33438

A stored Cross-site scripting XSS vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web script or HTML...

CVE-2023-34666

Cross-site scripting XSS vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter...

CVE-2023-3193

Cross-site scripting XSS vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.73, and Liferay DXP 7.4 update 70 through 73 allows remote attackers to inject arbitrary web script or HTML via the comliferaylayoutadminwebportletGroupPagesPortletbackURL...

CVE-2023-3193

Cross-site scripting XSS vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.73, and Liferay DXP 7.4 update 70 through 73 allows remote attackers to inject arbitrary web script or HTML via the comliferaylayoutadminwebportletGroupPagesPortletbackURL...

Cross site scripting

Cross-site scripting XSS vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.73, and Liferay DXP 7.4 update 70 through 73 allows remote attackers to inject arbitrary web script or HTML via the comliferaylayoutadminwebportletGroupPagesPortletbackURL...

CVE-2023-28598

Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a malicious user it could result in a Zoom application crash...

CVE-2023-28598

Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a malicious user it could result in a Zoom application crash...