7 matches found
CVE-2026-54355
MapServer (a web-based GIS application system) is affected by a reflected XSS in its OpenLayers HTML output. Versions from 6.0 through 8.6.3 reflect an attacker-controlled X-Forwarded-Host header value without escaping it for a single-quoted JavaScript string when handling SERVICE=WMS&REQUEST=Get...
EUVD-2022-52136
Malicious code in bioql PyPI...
CVE-2022-4876
A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic. This issue affects some unknown processing of the file includes/DefaultSettings.php. The manipulation of the argument HTTPXFORWARDEDHOST leads to cross site scripting. The attack may be initiated remotely...
Cross site scripting
A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic. This issue affects some unknown processing of the file includes/DefaultSettings.php. The manipulation of the argument HTTPXFORWARDEDHOST leads to cross site scripting. The attack may be initiated remotely...
CVE-2022-4876 Kaltura mwEmbed DefaultSettings.php cross site scripting
A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic. This issue affects some unknown processing of the file includes/DefaultSettings.php. The manipulation of the argument HTTPXFORWARDEDHOST leads to cross site scripting. The attack may be initiated remotely...
CVE-2022-4876
Kaltura mwEmbed up to 2.96.rc1 is affected by a cross-site scripting vulnerability in the handling of the file includes/DefaultSettings.php via the HTTP_X_FORWARDED_HOST parameter. The attack may be initiated remotely. Upgrading to 2.96.rc2 addresses the issue (patch 13b8812ebc8c9fa034eed91ab35ba...
CVE-2022-4876 Kaltura mwEmbed DefaultSettings.php cross site scripting
A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic. This issue affects some unknown processing of the file includes/DefaultSettings.php. The manipulation of the argument HTTPXFORWARDEDHOST leads to cross site scripting. The attack may be initiated remotely...