Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:37 p.m.2 views

CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

6.1CVSS6.4AI score0.002EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/04 7:7 a.m.3 views

CVE-2025-61597

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

7.6CVSS6.2AI score0.00036EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-53084

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.002EPSS
Exploits0References2
NVD
NVD
added 2025/10/03 7:15 a.m.1 views

CVE-2025-61597

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

7.6CVSS0.00036EPSS
Exploits1References2
CVE
CVE
added 2025/10/03 6:16 a.m.9 views

CVE-2025-61597

CVE-2025-61597 (Emlog) is a stored XSS vulnerability in Emlog 2.5.21 and earlier caused by HTML template injection in the mail template settings. In an authenticated admin session, saving a malicious payload can cause attacker‑controlled JavaScript to execute on subsequent visits to the settings ...

7.6CVSS5.8AI score0.00036EPSS
Exploits1References2Affected Software1
OpenVAS
OpenVAS
added 2024/06/25 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1814)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.69905EPSS
Exploits1References2
OSV
OSV
added 2023/11/21 3:15 p.m.2 views

CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

6.1CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2023/11/21 3:15 p.m.15 views

CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

6.1CVSS0.002EPSS
Exploits0References2
Prion
Prion
added 2023/11/21 3:15 p.m.13 views

Design/Logic Flaw

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

5.8CVSS6.6AI score0.002EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2023/11/21 3:15 p.m.19 views

CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

6.1CVSS6.4AI score0.002EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2023/11/21 2:28 p.m.32 views

CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

6.1CVSS5.9AI score0.002EPSS
Exploits0
CVE
CVE
added 2023/11/21 2:28 p.m.44 views

CVE-2023-49061

CVE-2023-49061 concerns Firefox for iOS prior to version 120, where the Reader Mode fails to neutralize HTML tags, enabling an attacker to perform HTML template injection and potentially exfiltrate user information. Affected software: Firefox for iOS

6.1CVSS6AI score0.002EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/21 2:28 p.m.12 views

CVE-2023-49061

An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS 120...

6.3AI score0.002EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/11/21 12:0 a.m.1 views

Mozilla Firefox Security Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox prior to version 120, which could allow an attacker to perform HTML template injection and steal user information via reader mode...

6.1CVSS6.6AI score0.002EPSS
Exploits0References3
Rows per page
Query Builder