CVE-2022-1074: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input HTML Injection in the WiFi settings of the dashboard leads to html injection...

CLTPHP Cross-Site Scripting Vulnerabilities

CLTPHP is an open source PHP content management system for efficient website building. CLTPHP suffers from a cross-site scripting vulnerability that allows an attacker to inject arbitrary html and script code into a website...

PT-2022-17377

Name of the Vulnerable Software and Affected Versions Parking Management System version 1.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via crafted payloads injected into the user name, password, and verification code text boxes. This enables the execution of...

CVE-2022-1002

Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations...

Design/Logic Flaw

Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations...

CVE-2022-1002 HTML Injection while inviting Guests

Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations...

CVE-2022-1002 HTML Injection while inviting Guests

Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations...

CVE-2022-1002

Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations...

CVE-2022-1002 HTML Injection while inviting Guests

Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations...

PT-2022-13583

Name of the Vulnerable Software and Affected Versions Mattermost versions 6.3.0 and earlier Description The issue arises from the failure to properly sanitize HTML content in email invitations sent to guest users. This allows registered users with special permissions to invite guest users and...

Mattermost cross-site scripting vulnerabilities

A security vulnerability exists in Mattermost, an open source collaboration platform from Mattermost Inc. in the U.S. The vulnerability allows a registered user with special privileges to invite guest users to inject unescaped HTML content into an email invitation. No details of the vulnerability...

CVE-2021-43961

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

CVE-2021-43961

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

CVE-2021-43961

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

Design/Logic Flaw

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

CVE-2021-43961

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

CVE-2021-43961

CVE-2021-43961 affects Sonatype Nexus Repository Manager 3.36.0 (NXS/NXRM). The connected sources specify a HTML Injection vulnerability in this version. No exploit vectors, exploit status, or remediation details are provided in the available documents. The reports consistently describe the issue...

PT-2022-11958

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository Manager version 3.36.0 Description The issue allows for HTML Injection. Recommendations For Sonatype Nexus Repository Manager version 3.36.0, at the moment, there is no information about a newer version that contains ...

CVE-2021-43961: Improper Neutralization of Input During Web Page Generation

Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection...

DEBIAN-CVE-2022-24728

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing content...