Lucene search
+L

13 matches found

Nuclei
Nuclei
•added 2026/10/17 2:05 a.m.•80 views

JustWriting - Cross-Site Scripting

A cross-site scripting vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter. id: CVE-2021-41467 info: name: JustWriting - Cross-Site Scripting author: madrobot severity: medium...

6.1CVSS6.2AI score0.03601EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 11:36 a.m.•16 views

CVE-2021-41467

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.1CVSS6.5AI score0.03601EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2021/10/04 8:13 p.m.•56 views

Cross-site scripting in application/controllers/dropbox.php in JustWriting

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.1CVSS4.1AI score0.03601EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2021/10/04 8:13 p.m.•62 views

GHSA-GXMC-5WJ3-JX64 Cross-site scripting in application/controllers/dropbox.php in JustWriting

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.1CVSS6AI score0.03601EPSS
SaveExploits0References3
NVD
NVD
•added 2021/10/01 4:15 p.m.•28 views

CVE-2021-41467

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.1CVSS0.03601EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/10/01 4:15 p.m.•8 views

CVE-2021-41467

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.1CVSS6.6AI score0.03601EPSS
SaveExploits0References4
Prion
Prion
•added 2021/10/01 4:15 p.m.•22 views

Cross site scripting

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

4.3CVSS6AI score0.03601EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2021/10/01 3:42 p.m.•2 views

CVE-2021-41467

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.1CVSS0.03601EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/10/01 3:42 p.m.•38 views

CVE-2021-41467

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.2AI score0.03601EPSS
SaveExploits0References2
CVE
CVE
•added 2021/10/01 3:42 p.m.•97 views

CVE-2021-41467

CVE-2021-41467 affects JustWriting 1.0.0 and earlier. A vulnerability in file application/controllers/dropbox.php allows remote attackers to inject arbitrary web script or HTML via the challenge parameter (XSS). Exploitation status not detailed in the provided docs beyond the description; remedia...

6.1CVSS6AI score0.03601EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/01 12:00 a.m.•9 views

CVE-2021-41467: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

6.1CVSS6AI score0.03601EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/10/01 12:00 a.m.•6 views

PT-2021-23309

Name of the Vulnerable Software and Affected Versions JustWriting versions 1.0.0 and below Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the challenge parameter in the application/controllers/dropbox.php file. Recommendations For...

6.1CVSS0.03601EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/10/01 12:00 a.m.•16 views

JustWriting 跨站脚本漏洞

JustWriting is a simple blogging platform. A cross-site scripting vulnerability exists in JustWriting versions 1.0.0 and below, which allows remote attackers to inject arbitrary web script or HTML via the challange parameter...

6.1CVSS6.1AI score0.03601EPSS
SaveExploits0References3
Rows per page
Query Builder