CVE-2022-34966

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...

CVE-2022-34966

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...

CVE-2022-34966: Improper Neutralization of Input During Web Page Generation

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...

Open Source Social Network Cross-Site Script Vulnerabilities

Open Source Social Network OSSN is a source social network engine from the Swiss OSSN team. A cross-site scripting vulnerability exists in Open Source Social Network version v6.3 LTS, which originates from an attacker being able to cause HTML injection via a directory-specific location parameter...

PT-2022-22461 · Openteknik Llc · Openteknik Llc Ossn Open Source Social Network

Name of the Vulnerable Software and Affected Versions: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK version 6.3 LTS Description: The issue is related to an HTML injection vulnerability. This vulnerability can be exploited via the location parameter at the API endpoint "http://ip...

Cross site scripting

Cross-site Scripting XSS vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL...

CVE-2022-2511

The CVE-2022-2511 issue affects BlueSpice’s commonuserinterface component, enabling Cross-site Scripting (XSS) via the title parameter in the call URL. The vulnerability is a client-visible injection risk that can cause arbitrary HTML to be rendered in pages, as described in upstream advisories. ...

PT-2022-17081

Name of the Vulnerable Software and Affected Versions BlueSpice affected versions not specified Description The issue concerns a Cross-site Scripting XSS vulnerability in the commonuserinterface component. This allows an attacker to inject arbitrary HTML into a page using the title parameter of t...

BlueSpice cross-site scripting vulnerabilities

BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. A security vulnerability exists in the BlueSpice 4.x series of releases, which stems from a commonuserinterface component that allows an attacker to inject arbitrary HTML into a page using the title parameter of the...

BlueSpice cross-site scripting vulnerabilities

BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. A security vulnerability exists in BlueSpice version 4.x and the 3.x series of versions, which originates from a user being able to inject arbitrary HTML XSS on Special:SearchCenter using search terms...

CVE-2022-27545

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

CVE-2022-27545

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

Input validation

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

CVE-2022-27545 HCL BigFix Web Reports authorized users may perform HTML injection.

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

CVE-2022-27545 HCL BigFix Web Reports authorized users may perform HTML injection.

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

CVE-2022-27545

CVE-2022-27545 affects HCL BigFix Platform (BigFix Web Reports). The issue is an HTML injection vulnerability on the email administrative configuration page that could be exploited by an authorized user to inject malicious scripts into a Web page, potentially compromising user sessions (cookie-ba...

PT-2022-18476

Name of the Vulnerable Software and Affected Versions BigFix Web Reports affected versions not specified Description The issue allows authorized users of BigFix Web Reports to perform HTML injection on the email administrative configuration page. Recommendations At the moment, there is no...

CVE-2022-27545: Improper Neutralization of Input During Web Page Generation

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

CVE-2022-27545

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

GHSA-JWVF-28FG-G4XG WooCommerce WordPress plugin before 6.6.0 vulnerable to stored HTML injection

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...