CVE-2023-47766: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Timo Reith Post Status Notifier Lite plugin = 1.11.0 versions...

PT-2023-30638

Name of the Vulnerable Software and Affected Versions ARI Stream Quiz – WordPress Quizzes Builder plugin versions 1.2.32 and earlier Description The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations For ARI...

CVE-2023-47646: Improper Neutralization of Input During Web Page Generation

Auth. Shop Manager+ Stored Cross-Site Scripting XSS vulnerability in CedCommerce Recently viewed and most viewed products plugin = 1.1.1 versions...

CVE-2023-36007: Improper Neutralization of Input During Web Page Generation

Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability...

CVE-2023-46735: Improper Neutralization of Input During Web Page Generation

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in version 6.0.0 and prior to version 6.3.8, the error message in WebhookController returns unescaped user-submitted input. As of version 6.3.8, WebhookController now doesn't return any...

CVE-2023-5894: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository pkp/ojs prior to 3.3.0-16...

CVE-2023-5696: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file pagestransfermoney.php. The manipulation of the argument accountnumber with the input 357146928--...

CVE-2023-5698: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. This vulnerability affects unknown code of the file pagesdepositmoney.php. The manipulation of the argument accountnumber with the input 421873905--...

CVE-2023-5697: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in CodeAstro Internet Banking System 1.0. This affects an unknown part of the file pageswithdrawmoney.php. The manipulation of the argument accountnumber with the input 287359614--...

CVE-2023-5688: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - DOM in GitHub repository modoboa/modoboa prior to 2.2.2...

CVE-2023-5485: Improper Neutralization of Input During Web Page Generation

Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass autofill restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2023-41728: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This issue affects Rescue Shortcodes: from n/a through 2.5...

CVE-2023-42817: Improper Neutralization of Input During Web Page Generation

Pimcore admin-ui-classic-bundle provides a Backend UI for Pimcore. The translation value with text including “%s” from “%suggest% is parsed by sprintf even though it’s supposed to be output literally to the user. The translations may be accessible by a user with comparatively lower overall access...

CVE-2023-39971: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3...

CVE-2023-39006: Improper Neutralization of Input During Web Page Generation

The Crash Reporter crashreporter.php component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 mishandles input sanitization...

CVE-2023-36892: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server Spoofing Vulnerability...

CVE-2023-4136: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CrafterCMS Engine on Windows, MacOS, Linux, x86, ARM, 64 bit allows Reflected XSS.This issue affects CrafterCMS: from 4.0.0 through 4.0.2, from 3.1.0 through 3.1.27...

CVE-2023-30564: Improper Neutralization of Input During Web Page Generation

Alaris Systems Manager does not perform input validation during the Device Import Function...

CVE-2023-36809: Improper Neutralization of Input During Web Page Generation

Kiwi TCMS, an open source test management system allows users to upload attachments to test plans, test cases, etc. Versions of Kiwi TCMS prior to 12.5 had introduced changes which were meant to serve all uploaded files as plain text in order to prevent browsers from executing potentially dangero...

CVE-2023-3332: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a...