Lucene search
+L

5259 matches found

CNVD
CNVD
added 2021/03/26 12:0 a.m.30 views

Plone cross-site scripting vulnerability (CNVD-2021-22849)

Plone is an open source content management system CMS built on the Zope application server. A cross-site scripting vulnerability exists in Plone version 5.2.3, which stems from the form.widgets.sitetitle parameter not effectively filtering user input, and can be exploited by an attacker to inject...

5.4CVSS5.9AI score0.00762EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/03/26 12:0 a.m.41 views

SEO Panel Cross-Site Scripting Vulnerability (CNVD-2021-23384)

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in SEO Panel version 4.8.0. An attacker can exploit this vulnerability to inject JavaScript via the reporttype parameter in archive.php...

4.8CVSS5.9AI score0.00755EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/03/26 12:0 a.m.11 views

SEO Panel 跨站脚本漏洞

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in SEO Panel version 4.8.0. The vulnerability can be exploited to inject JavaScript via the totime parameter in webmaster-tools.php...

7.5CVSS5.2AI score0.01155EPSS
SaveExploits2References2
CNVD
CNVD
added 2021/03/26 12:0 a.m.14 views

SEO Panel Cross-Site Scripting Vulnerability (CNVD-2021-23382)

SEO Panel is a free, open source SEO optimization software. A cross-site scripting vulnerability exists in SEO Panel version 4.8.0. The vulnerability can be exploited to inject JavaScript via the type parameter in archive.php...

4.8CVSS5.9AI score0.00828EPSS
SaveExploits1References1
NVD
NVD
added 2021/03/25 8:15 p.m.30 views

CVE-2021-29010

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "reporttype" parameter...

4.8CVSS0.00755EPSS
SaveExploits1References1
OSV
OSV
added 2021/03/25 8:15 p.m.18 views

CVE-2021-29008

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.php in the "totime" parameter...

4.8CVSS5.9AI score
SaveExploits0References1
OSV
OSV
added 2021/03/25 8:15 p.m.17 views

CVE-2021-29010

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "reporttype" parameter...

4.8CVSS5.9AI score
SaveExploits0References1
NVD
NVD
added 2021/03/25 8:15 p.m.32 views

CVE-2021-29009

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter...

4.8CVSS0.00828EPSS
SaveExploits1References1
OSV
OSV
added 2021/03/25 8:15 p.m.20 views

CVE-2021-29009

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter...

4.8CVSS5.9AI score
SaveExploits0References1
Prion
Prion
added 2021/03/25 8:15 p.m.14 views

Cross site scripting

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.php in the "totime" parameter...

3.5CVSS4.9AI score0.00755EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/03/25 8:15 p.m.24 views

Cross site scripting

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "reporttype" parameter...

3.5CVSS4.9AI score0.00755EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/03/25 8:15 p.m.17 views

Cross site scripting

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter...

3.5CVSS4.9AI score0.00828EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/03/25 7:21 p.m.37 views

CVE-2021-29010

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "reporttype" parameter...

5.2AI score0.00755EPSS
SaveExploits1References1
CVE
CVE
added 2021/03/25 7:21 p.m.58 views

CVE-2021-29010

CVE-2021-29010 is a cross-site scripting (XSS) vulnerability in SEO Panel version 4.8.0. The flaw allows remote attackers to inject JavaScript via archive.php in the report_type parameter. Multiple sources (NVD, Red Hat, CNVD, OSV, CVE lists) corroborate the issue; exploitation and impact are con...

4.8CVSS4.9AI score0.00755EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/03/25 7:21 p.m.39 views

CVE-2021-29009

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter...

5.2AI score0.00828EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/03/25 7:21 p.m.27 views

CVE-2021-29008

A cross-site scripting XSS issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.php in the "totime" parameter...

5.2AI score0.00755EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/03/25 12:0 a.m.10 views

Bitweaver Cross-Site Scripting Vulnerability (CNVD-2021-22576)

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/index.php URI...

4.8CVSS6.1AI score0.00786EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/03/25 12:0 a.m.22 views

Bitweaver cross-site scripting vulnerability (CNVD-2021-22577)

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/admin/useractivity.php URI...

4.8CVSS6.1AI score0.00786EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/03/25 12:0 a.m.11 views

Bitweaver Cross-Site Scripting Vulnerability (CNVD-2021-22580)

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/admin/usersimport.php URI...

4.8CVSS6.1AI score0.00862EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/03/25 12:0 a.m.7 views

NOKIA NetAct 18A 跨站脚本漏洞

Nokia NetAct 18A is an application system from NOKIA, Finland. It provides best-in-class applications for seamless day-to-day network operations, including configuration management, monitoring and software management. A security vulnerability exists in Nokia NetAct 18A that allows an attacker to...

5.4CVSS5.6AI score0.00737EPSS
SaveExploits1References4
Rows per page
Query Builder