CVE-2021-28121

Virtual Robots.txt before 1.10 does not block HTML tags in the robots.txt field...

DEBIAN-CVE-2021-32809

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...

Design/Logic Flaw

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...

CVE-2021-32809 Arbitrary HTML injection vulnerability in ckeditor

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...

CVE-2021-32809

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 "Clipboard" https://ckeditor.com/cke4/addon/clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in...

CVE-2021-32809

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...

CVE-2021-37695: Improper Neutralization of Input During Web Page Generation

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Fake Objects package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using...

CVE-2021-32809: Improper Control of Generation of Code

ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 Clipboard package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It...

CKEditor cross-site scripting vulnerability

CKEditor is an open source, web-based text editor. A cross-site scripting vulnerability in the CKEditor 4 Clipboard package allows users to abuse the paste function with malformed HTML, which could result in injecting arbitrary HTML into the editor...

CVE-2021-37541

In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible...

CVE-2021-37541

In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible...

Design/Logic Flaw

In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible...

CVE-2021-37541

CVE-2021-37541 affects JetBrains Hub and was triggered by HTML injection in the password reset email. The Red Hat and CNVD entries corroborate the issue as an authorization/HTML-injection vulnerability in Hub prior to 2021.1.13402. JetBrains’ Q2-2021 security bulletin confirms the issue and lists...

CVE-2021-37541

In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible...

JetBrains Hub authorization issue vulnerability

JetBrains Hub is a web-based application from JetBrains Czech Republic. The application is able to integrate multiple JetBrains team tools together. An authorization issue vulnerability exists in versions prior to JetBrains Hub 2021.1.13402, which stems from the fact that it is possible for the...

PT-2021-21700

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2021.1.13402 Description The issue concerns HTML injection in the password reset email. This allows for potential malicious activities through crafted emails. Recommendations For versions prior to 2021.1.13402,...

CVE-2021-37541: Improper Neutralization of Special Elements in Output Used by a Downstream Component

In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible...

CVE-2021-35463

Cross-site scripting XSS vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the keywords parameter...

CVE-2021-35463

The CVE-2021-35463 XSS exists in the Frontend Taglib module of Liferay Portal, affecting 7.4.0 (and 7.4.1 per Red Hat) with remote injection of scripts/HTML into the management toolbar search via the keywords parameter. The issue is caused by an incomplete fix (linked to CVE-2021-35463) and is di...

CVE-2021-33337

Cross-site scripting XSS vulnerability in the Document Library module's add document menu in Liferay Portal 7.3.0 through 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9, allows remote attackers to inject arbitrary web script or HTML via the...