16142 matches found
CVE-2024-25706
Summary (CVE-2024-25706) : An HTML injection vulnerability in Esri Portal for ArcGIS
CVE-2024-25690 HTML injection in ArcGIS Web AppBuilder
There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.1 and below that may allow a remote, unauthenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser...
CVE-2024-25690 HTML injection in ArcGIS Web AppBuilder
There is an HTML injection vulnerability in Esri Portal for ArcGIS versions 11.1 and below that may allow a remote, unauthenticated attacker to create a crafted link which when clicked could render arbitrary HTML in the victim’s browser...
Exploit for Cross-Site Request Forgery (CSRF) in Leantime
Leantime-POC CVE-2024-27474, CVE-2024-27476, CVE-2024-27477...
CVE-2023-25200
An HTML injection vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote attacker to render malicious HTML and obtain sensitive information in a victim's browser...
PT-2024-21090 · Esri · Esri Portal For Arcgis
Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS versions 11.1 and below Description: The issue allows a remote, unauthenticated attacker to create a crafted link that, when clicked, could render arbitrary HTML in the victim's browser. This is due to an HTML injection...
PT-2024-12051 · Unknown · Mt Safeline X-Ray X3310
Name of the Vulnerable Software and Affected Versions: MT Safeline X-Ray X3310 webserver version NXG 19.05 Description: A reflected cross-site scripting XSS vulnerability exists, enabling a remote attacker to execute JavaScript code and obtain sensitive information in a victim's browser...
CVE-2023-25200
The CVE-2023-25200 entry concerns MT Safeline X-Ray X3310 Webserver NXG 19.05 with an HTML injection vulnerability that can cause a remote attacker to render malicious HTML in a victim's browser and access sensitive information. Red Hat and other sources describe it as an HTML injection/XSS issue...
CVE-2023-25200
An HTML injection vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote attacker to render malicious HTML and obtain sensitive information in a victim's browser...
PT-2024-12052 · Unknown · Mt Safeline X-Ray X3310
Name of the Vulnerable Software and Affected Versions: MT Safeline X-Ray X3310 webserver version NXG 19.05 Description: An HTML injection issue exists that allows a remote attacker to render malicious HTML, potentially obtaining sensitive information in a victim's browser. Recommendations: For MT...
WordPress Responsive theme <= 5.0.2 - Missing Authorization to HMTL Injection vulnerability
Missing Authorization to HMTL Injection vulnerability discovered by Krzysztof Zając - CERT PL, Muhammad Zeeshan Xib3rR4dAr in WordPress Theme Responsive versions = 5.0.2...
VulnCheck KEV: CVE-2024-2848
The Responsive theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savefootertextcallback function in all versions up to, and including, 5.0.2. This makes it possible for unauthenticated attackers to inject arbitrary HTML content into...
CVE-2024-2848 Responsive <= 5.0.2 - Missing Authorization to HTML Injection
The Responsive theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savefootertextcallback function in all versions up to, and including, 5.0.2. This makes it possible for unauthenticated attackers to inject arbitrary HTML content into th...
HTML Injection
phpmyfaq is vulnerable to HTML injection. The vulnerability is due to insufficient validation on the contentLink parameter, this allowing an attacker to inject HTML code that can affect other users...
Responsive < 5.0.3 - Missing Authorization to HMTL Injection
Description The Responsive theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the savefootertextcallback function in all versions up to, and including, 5.0.2. This makes it possible for unauthenticated attackers to inject arbitrary HTML...
HTML Injection
moodle/moodle is vulnerable to HTML Injection. The vulnerability due to Moodle's support for HTML code insertion within the Chat activity, which allows students to insert potentially harmful HTML elements that could lead to performance degradation...
CVE-2023-25364
Opswat Metadefender Core before 5.2.1 does not properly defend against potential HTML injection and XSS attacks...
CVE-2023-25364
Opswat Metadefender Core before 5.2.1 does not properly defend against potential HTML injection and XSS attacks...
Opswat Metadefender Core 安全漏洞
OPSWAT MetaDefender Core OPSWAT MDCore is a multi-engine anti-malware software from OPSWAT, Inc. It prevents the upload of malicious files on web applications that bypass sandboxing and other detection-based security solutions. A security vulnerability exists in Opswat Metadefender Core versions...