16144 matches found
BIT-LIFERAY-2021-38269
Cross-site scripting XSS vulnerability in the Gogo Shell module in Liferay Portal 7.1.0 through 7.3.6 and 7.4.0, and Liferay DXP 7.1 before fix pack 23, 7.2 before fix pack 13, and 7.3 before fix pack 2 allows remote attackers to inject arbitrary web script or HTML via the output of a Gogo Shell...
BIT-LIFERAY-2023-33938
Cross-site scripting XSS vulnerability in the App Builder module's custom object details page in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before update 14 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an App Builder custom object...
BIT-LIFERAY-2023-33941
Multiple cross-site scripting XSS vulnerabilities in the Plugin for OAuth 2.0 module's OAuth2ProviderApplicationRedirect class in Liferay Portal 7.4.3.41 through 7.4.3.52, and Liferay DXP 7.4 update 41 through 52 allow remote attackers to inject arbitrary web script or HTML via the 1 code, or 2...
BIT-LIFERAY-2023-33942
Cross-site scripting XSS vulnerability in the Web Content Display widget's article selector in Liferay Liferay Portal 7.4.3.50, and Liferay DXP 7.4 update 50 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a web content article's Title field...
BIT-LIFERAY-2023-42628
Stored cross-site scripting XSS vulnerability in the Wiki widget in Liferay Portal 7.1.0 through 7.4.3.87, and Liferay DXP 7.0 fix pack 83 through 102, 7.1 fix pack 28 and earlier, 7.2 fix pack 20 and earlier, 7.3 update 33 and earlier, and 7.4 before update 88 allows remote attackers to inject...
BIT-LIFERAY-2023-44311
Multiple reflected cross-site scripting XSS vulnerabilities in the Plugin for OAuth 2.0 module's OAuth2ProviderApplicationRedirect class in Liferay Portal 7.4.3.41 through 7.4.3.89, and Liferay DXP 7.4 update 41 through update 89 allow remote attackers to inject arbitrary web script or HTML via t...
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Go HTML injection vulnerabilitiy [CVE-2023-24539]
Summary Potential Go HTML injection vulnerabilitiy have been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. CVE-2023-24539 Vulnerability Details CVEID:CVE-2023-24539 DESCRIPTION: Go is...
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Go HTML injection vulnerability [CVE-2023-24540]
Summary Go HTML injection vulnerability CVEID: CVE-2023-24540 have been identified that affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerabilities have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-24540 DESCRIPTION: Go is...
The vulnerability of the microprogrammed software of Emerson Rosemount X-STREAM allows a intruder to inject arbitrary HTML code.
The vulnerability of Emerson Rosemount X-STREAM flow analyzers’ microprogramming software is related to improper input cancellation during the generation of web pages. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTML code...
GoAhead Web Server 2.5 - 'goform/formTest' Multiple HTML Injection Vulnerabilities
Exploit Title: GoAhead Web Server 2.5 - 'goform/formTest' Multiple HTML Injection Vulnerabilities Date: 25/9/2023 Exploit Author: Syed Affan Ahmed ZEROXINN Vendor Homepage: https://www.embedthis.com/goahead/ Affected Version: 2.5 may be others. Tested On Version: 2.5 in ZTE AC3630...
CVE-2024-23817
Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...
Cross site scripting
Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...
UBUNTU-CVE-2024-23817
Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...
CVE-2024-23817
Dolibarr 18.0.4 is affected by an HTML injection vulnerability on the Home page. The issue allows injecting arbitrary HTML into the rendered page, enabling potential XSS via unsanitized user input in the Dolibarr application response. Root cause details in the connected documents indicate HTML in...
CVE-2024-23817 Dolibarr Application Home Page HTML injection vulnerability
Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...
CVE-2024-23817 Dolibarr Application Home Page HTML injection vulnerability
Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...
CVE-2024-23817 Dolibarr Application Home Page HTML injection vulnerability
Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. Version 18.0.4 has a HTML Injection vulnerability in the Home page of the Dolibarr Application. This vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendere...
PT-2024-20098 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: Dolibarr version 18.0.4 Description: Dolibarr is an enterprise resource planning ERP and customer relationship management CRM software package. The vulnerability allows an attacker to inject arbitrary HTML tags and manipulate the rendered...
Dolibarr Security Breach
Dolibarr is a software application. A modern software package that helps manage your organization's activities. A security vulnerability exists in Dolibarr version 18.0.4, which stems from an HTML injection vulnerability in the application's home page that allows an attacker to inject arbitrary...