CVE-2022-40434

Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page...

Input validation

Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page...

SNMP location XSS vulnerability

Description By including some HTML in the "Location" field of the snmpd configuration of a managed device, an attacker can inject HTML into the LibreNMS "Devices" tab, which then gets rendered when the page is viewed. EDIT: I'm having difficulties developing a proper exploit for this beyond the...

Softr 跨站脚本漏洞

Softr is a no-code website builder from Softr, Inc. A cross-site scripting vulnerability exists in Softr version v2.0, which stems from the Name field of its Account page allowing an attacker to implement HTML injection...

CVE-2022-40434

Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page...

CVE-2022-40434

Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page...

CVE-2022-40434

Softr v2.0 is affected by an HTML injection vulnerability in the Account page Name field. The CVE-2022-40434 entry indicates a high-severity issue (CVSS 3.1: 9.8, CRITICAL) with impact on confidentiality, integrity, and availability. The root cause is HTML injection via the Name field; exploitati...

Zoom Client for Meetings < 5.1.0 Vulnerability (ZSB-21015)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.1.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-21015 advisory. - In the Zoom Client for Meetings for Ubuntu Linux before version 5.1.0, there is an HTML injection flaw when sending a...

Cross site scripting

A cross-site scripting XSS vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to /cgi-bin/logs.ha...

CVE-2021-41943

Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action - Create a new Contextualize Action - Inject your HTML tag in the name field...

CVE-2021-41943

Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action - Create a new Contextualize Action - Inject your HTML tag in the name field...

CVE-2022-46906

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS...

CVE-2022-46903

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Stored XSS...

CVE-2022-46904

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Self-XSS...

Html Injection in Activity

Description Html injection in Activity and just only need html payload in workflow and fire in Activity list Proof of Concept 1. navigate to dashboard and workflow settings 2. insert new workflow with this payload test 3. open the activity list POC:...

CVE-2022-46904

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Self-XSS...

WebSoft HCM 跨站脚本漏洞

WebSoft HCM is a talent management and HR services platform from WebSoft Ukraine. A security vulnerability exists in WebSoft HCM version 2021.2.3.327, which stems from insufficient handling of user input and allows an authenticated attacker to inject arbitrary HTML markup into pages processed by...

Logrhythm 跨站脚本漏洞

Logrhythm is a software that collects, detects, alerts, and notifies about threat factors in a cluster from Logrhythm, Inc. in the United States. A security vulnerability exists in Logrhythm Web Console version 7.4.9. An attacker can exploit the vulnerability to inject HTML markup in the name fie...

PT-2022-28002 · Websoft · Websoft Hcm

Name of the Vulnerable Software and Affected Versions: WebSoft HCM version 2021.2.3.327 Description: The issue arises from insufficient processing of user input, allowing an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser. This includes scripts i...

CVE-2022-46905

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS...