XSS Vulnerability at JEESNS Microblogs

JEESNS is an open source social management system developed on JAVA's enterprise-class platform. JEESNS microblogging at the existence of XSS vulnerability , an attacker can use the vulnerability to inject arbitrary Web script or HTML...

XSS Vulnerability at JEESNS Gallery

JEESNS is an open source social management system developed on the JAVA enterprise level platform. JEESNS gallery at the existence of XSS vulnerability , an attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

XSS Vulnerability in JEESNS Administrator Login Screen

JEESNS is an open source social management system developed on the JAVA enterprise level platform. JEESNS administrator login interface has an XSS vulnerability that can be exploited by attackers to inject arbitrary Web script or HTML...

XSS Vulnerability at JEESNS Answers

JEESNS is an open source social management system developed on the JAVA enterprise level platform. JEESNS answer to an XSS vulnerability , an attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

XSS Vulnerability at JEESNS Q&A Service

JEESNS is an open source social management system developed on the JAVA enterprise level platform. JEESNS questions and answers at the existence of XSS vulnerability , an attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

XSS Vulnerability at Private Messages in JEESNS System

JEESNS is an open source social management system developed on the JAVA enterprise level platform. JEESNS system at the private message XSS vulnerability , an attacker can use the vulnerability to inject arbitrary Web script or HTML...

XSS Vulnerability at JEESNS Groups

JEESNS is an open source social management system developed on the JAVA enterprise level platform. JEESNS groups at the existence of an XSS vulnerability can be exploited by an attacker to inject arbitrary Web script or HTML...

JEESNS Cross-Site Scripting Vulnerability

JEESNS is an enterprise-level open source social management system building platform based on Java and MySQL, which includes microblogging module, group module and article module. JEESNS 1.3 version of the com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java file cross-site scripting...

CVE-2018-19178

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

Cross site scripting

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

CVE-2018-19178

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

CVE-2018-19178

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

CVE-2018-19178

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

CVE-2018-19178

CVE-2018-19178 concerns JEESNS 1.3. The vulnerability is in com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java and allows stored XSS via an HTML EMBED element. This CVE entry notes it is a different issue from CVE-2018-17886. The available sources describe the affected component and t...

CVE-2018-19178: Improper Neutralization of Input During Web Page Generation

In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886...

PT-2018-14840

Name of the Vulnerable Software and Affected Versions JEESNS version 1.3 Description The issue in JEESNS allows stored XSS via an HTML EMBED element. This is a different issue than previously identified vulnerabilities. Recommendations For JEESNS version 1.3, consider disabling the...

CVE-2018-17886

An issue was discovered in JEESNS 1.3. The XSS filter in com.lxinet.jeesns.core.utils.XssHttpServletRequestWrapper.java could be bypassed, as demonstrated by a svg/onLoad=confirm substring. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-12429...

CVE-2018-17886

An issue was discovered in JEESNS 1.3. The XSS filter in com.lxinet.jeesns.core.utils.XssHttpServletRequestWrapper.java could be bypassed, as demonstrated by a svg/onLoad=confirm substring. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-12429...

Code injection

An issue was discovered in JEESNS 1.3. The XSS filter in com.lxinet.jeesns.core.utils.XssHttpServletRequestWrapper.java could be bypassed, as demonstrated by a svg/onLoad=confirm substring. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-12429...

CVE-2018-17886

CVE-2018-17886 affects JEESNS 1.3. The vulnerability is a bypass of the XSS filter in com.lxinet.jeesns.core.utils.XssHttpServletRequestWrapper.java, demonstrated by a crafted