20188 matches found
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
Design/Logic Flaw
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
UBUNTU-CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
CVE-2023-48104
Alinto SOGo prior to 5.9.1 is vulnerable to an HTML Injection issue (CVE-2023-48104). Affected product: SOGo; vulnerable component/behavior is HTML injection in the web interface. CVSS v3.1 base score 6.1 (Medium) with Network attack vector, no privileges required, user interaction required, scop...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
SOGo Security Breach
SOGo is a very fast and scalable modern collaboration suite. It provides calendaring, address book management and a full-featured Webmail client as well as resource sharing and permission handling. A security vulnerability exists in SOGo version 5.8.0, which stems from an HTML injection...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
CVE-2023-48104: Improper Neutralization of Input During Web Page Generation
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
PT-2024-14861 · WordPress · Eventon
Name of the Vulnerable Software and Affected Versions: EventON WordPress plugin versions prior to 2.2 Description: The issue allows high privilege users, such as admin, to perform Stored HTML Injection attacks even when the unfiltered html capability is disallowed, due to the plugin not sanitizin...
WordPress plugin EventON security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2023-6046: Improper Neutralization of Input During Web Page Generation
The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored HTML Injection attacks even when the unfilteredhtml capability is disallowed...
CVE-2023-48104
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection...
PT-2024-13540
Name of the Vulnerable Software and Affected Versions Alinto SOGo versions 5.8.0 through 5.9.0 Description The issue is related to HTML Injection. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
Cross-site Scripting in JFinal
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML...
Cross site scripting
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML...
CVE-2024-22492
CVE-2024-22492 describes a stored XSS vulnerability in JFinalCMS 5.0.0. The issue is exploitable via the /gusetbook/save contact parameter, allowing remote attackers to inject arbitrary web script or HTML. The CVE entry notes a network-based vector with low attack complexity and requires user int...