CVE-2022-27545

CVE-2022-27545 affects HCL BigFix Platform (BigFix Web Reports). The issue is an HTML injection vulnerability on the email administrative configuration page that could be exploited by an authorized user to inject malicious scripts into a Web page, potentially compromising user sessions (cookie-ba...

CVE-2022-27545

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

GHSA-JWVF-28FG-G4XG WooCommerce WordPress plugin before 6.6.0 vulnerable to stored HTML injection

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...

WordPress WooCommerce Plugin < 6.6.0 Stored HTML Injection Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2022-31201

SoftGuard Web SGW before 5.1.5 allows HTML injection...

CVE-2022-31201

SoftGuard Web SGW before 5.1.5 allows HTML injection...

CVE-2022-31201

SoftGuard Web SGW before 5.1.5 allows HTML injection...

Design/Logic Flaw

SoftGuard Web SGW before 5.1.5 allows HTML injection...

CVE-2022-31201

SoftGuard Web SGW before 5.1.5 allows HTML injection...

CVE-2022-31201

CVE-2022-31201 affects SoftGuard Web (SGW) prior to 5.1.5. An HTML injection vulnerability in SGW enables injection within the web interface. Public records describe impact as the ability to access arbitrary files and download them via the vulnerable SGW SNMP Network Management Extension. The iss...

CVE-2022-2099

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...

CVE-2022-2099

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...

Design/Logic Flaw

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...

CVE-2022-2099

CVE-2022-2099 affects the WooCommerce WordPress plugin prior to 6.6.0. The issue is a stored HTML injection vulnerability caused by insufficient escaping/sanitizing in the payment gateway titles, enabling injection into stored content. Impact is limited to sites running WooCommerce versions befor...

CVE-2022-2099 WooCommerce < 6.6.0 - Admin+ Stored HTML Injection

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...

CVE-2022-2099 WooCommerce < 6.6.0 - Admin+ Stored HTML Injection

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...

PT-2022-14857 · WordPress · Woocommerce

Name of the Vulnerable Software and Affected Versions: WooCommerce WordPress plugin versions prior to 6.6.0 Description: The issue is related to stored HTML injection due to a lack of escaping and sanitizing in the payment gateway titles. This allows for potential malicious code injection...

Zimbra Collaboration Server 8.8.x < 8.8.15 Patch 23 / 9.0.0 < 9.0.0 Patch 16 Multiple Vulnerabilities

According to its self-reported version number, Zimbra Collaboration Server is affected by a multiple vulnerabilities, including the following: - An open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite through 9.0. To exploit the vulnerability, an attacker would...

IBM CICS TX Advanced HTML Injection Vulnerability

IBM CICS TX Standard and Advanced is a comprehensive, single transaction runtime package from IBM USA. It can provide a cloud-native deployment model for standalone applications. An HTML injection vulnerability exists in IBM CICS TX Standard and Advanced version 11.1. The vulnerability stems from...

GHSA-G688-7J3C-H9F3 Known v1.3.1 Cross-site Scripting

A cross-site scripting XSS vulnerability in Known v1.3.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field. The researcher report indicates that versions 1.3.1 and prior are vulnerable. Version 1.2.2 is the last...