CVE-2022-1492

Insufficient data validation in Blink Editing in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to inject arbitrary scripts or HTML via a crafted HTML page...

Atlassian Jira Confluence Server and Data Center 跨站脚本漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A security vulnerability exists in Confluence Server and Data Center, which originates in the Livesearch macro that allows remot...

CVE-2022-34966

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...

Design/Logic Flaw

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...

CVE-2022-34966

Open Source Social Network (OSSN) v6.3 LTS contains an HTML injection漏洞 exposed via the location parameter at /ossn/home. The issue is documented across multiple sources as an HTML injection/vector that could lead to client-side impacts; no explicit exploitation details or patch/version fixes are...

CVE-2022-34966

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...

CVE-2022-34966

OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter at http://ipaddress/:port/ossn/home...

Open Source Social Network 跨站脚本漏洞

Open Source Social Network OSSN is a source social network engine from the Swiss OSSN team. A cross-site scripting vulnerability exists in Open Source Social Network version v6.3 LTS, which originates from an attacker being able to cause HTML injection via a directory-specific location parameter...

PT-2022-22461 · Openteknik Llc · Openteknik Llc Ossn Open Source Social Network

Name of the Vulnerable Software and Affected Versions: OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK version 6.3 LTS Description: The issue is related to an HTML injection vulnerability. This vulnerability can be exploited via the location parameter at the API endpoint "http://ip...

Cross site scripting

Cross-site Scripting XSS vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to inject arbitrary HTML into a page using the title parameter of the call URL...

CVE-2022-2511

The CVE-2022-2511 issue affects BlueSpice’s commonuserinterface component, enabling Cross-site Scripting (XSS) via the title parameter in the call URL. The vulnerability is a client-visible injection risk that can cause arbitrary HTML to be rendered in pages, as described in upstream advisories. ...

BlueSpice 跨站脚本漏洞

BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. A security vulnerability exists in BlueSpice version 4.x and the 3.x series of versions, which originates from a user being able to inject arbitrary HTML XSS on Special:SearchCenter using search terms...

BlueSpice 跨站脚本漏洞

BlueSpice is free Wiki software from BlueSpice based on the MediaWiki engine. A security vulnerability exists in the BlueSpice 4.x series of releases, which stems from a commonuserinterface component that allows an attacker to inject arbitrary HTML into a page using the title parameter of the...

CVE-2022-27545

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

CVE-2022-27545

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

Input validation

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

CVE-2022-27545 HCL BigFix Web Reports authorized users may perform HTML injection.

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

CVE-2022-27545

CVE-2022-27545 affects HCL BigFix Platform (BigFix Web Reports). The issue is an HTML injection vulnerability on the email administrative configuration page that could be exploited by an authorized user to inject malicious scripts into a Web page, potentially compromising user sessions (cookie-ba...

CVE-2022-27545

BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page...

GHSA-JWVF-28FG-G4XG WooCommerce WordPress plugin before 6.6.0 vulnerable to stored HTML injection

The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitizing in the payment gateway titles...