510 matches found
Spotweb <= 1.5.1 - Cross Site Scripting
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the lastname parameter. id: CVE-2021-40973 info: name: Spotweb = 1.5.1 - Cross Site Scripting author: theamanrawat severity:...
CVE-2022-3546
CVE-2022-3546 https://vulners.com/cve/CVE-2022-3546 在 SourceCodester Simple Cold Storage Management System 1.0 中发现了一个漏洞，并将其归类为存在问题。受此问题影响的是文件 /csms/admin/?page=user/list 中的某个未知功能，该文件属于组件“创建用户处理程序”。对参数“名字/姓氏”的操作会导致跨站脚本攻击。该攻击可以远程发起。该漏洞利用已被公开披露，可能被使用。VDB-211046 是为此漏洞分配的标识符。...
CVE-2026-92244
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields in all versions up to, and including, 5.16.1 due to insufficient input sanitization and output escaping. This makes it possible fo...
CVE-2026-92244 PDF Invoices & Packing Slips for WooCommerce <= 5.16.1 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields in all versions up to, and including, 5.16.1 due to insufficient input sanitization and output escaping. This makes it possible fo...
CVE-2026-92244 PDF Invoices & Packing Slips for WooCommerce <= 5.16.1 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields in all versions up to, and including, 5.16.1 due to insufficient input sanitization and output escaping. This makes it possible fo...
CVE-2026-92244
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.16.1 . The root cause is insufficient input sanitization and output escaping within the Billing First Name , Last Name , and Company field...
CVE-2024-31027
Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...
CVE-2024-31027
Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...
EUVD-2024-55777
Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...
CVE-2024-31027
A Cross Site Scripting (XSS) vulnerability exists in the Greek Universities Network (GUnet) Open eClass Platform v.3.15 . A remote attacker can exploit this by providing malicious input through the last name , first name , and username parameters within the user registration functionality . This ...
CVE-2022-24227-updated
CVE-2022-24227 已更新 - BoltWire v8.00 - 存储型跨站脚本攻击 XSS 描述 CVE-2022-24227 已更新 ：在 BoltWire CMS 的 8.00 版本 中，成员注册完成页面的 名 和 姓 字段同样容易受到存储型跨站脚本 XSS 攻击，就像 7.10 版本一样。此类攻击允许执行恶意脚本。 修复建议 对这些字段中的用户输入进行清理。 复现步骤： 1 创建一个新成员。 2 在下一页，系统会要求输入新成员的 名、姓 和 国家。在此，使用以下载荷填写 名： 和 姓：： 名： alertXSS 姓： alertdocument.cookie 3...
PT-2026-83712
A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /register.php of the component User Registration. Such manipulation of the argument last name leads to cross site scripting. The attack may be launched remotely. The exploit has...
EUVD-2026-60559
A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument firstname/lastname causes basic cross site scripting. It is possible to...
EUVD-2026-52965
Cross Site Scripting vulnerability in Soliton Systems MailZen Management Protal v.2.62, v.2.63 allows a remote attacker to execute arbitrary code via the Role Name, First Name, Last Name, and Username fields...
CVE-2026-51144
Cross Site Scripting vulnerability in Soliton Systems MailZen Management Protal v.2.62, v.2.63 allows a remote attacker to execute arbitrary code via the Role Name, First Name, Last Name, and Username fields...
CVE-2026-51144: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Soliton Systems MailZen Management Protal v.2.62, v.2.63 allows a remote attacker to execute arbitrary code via the Role Name, First Name, Last Name, and Username fields...
CVE-2026-51144
Cross Site Scripting vulnerability in Soliton Systems MailZen Management Protal v.2.62, v.2.63 allows a remote attacker to execute arbitrary code via the Role Name, First Name, Last Name, and Username fields...
CVE-2026-68501
Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8, 3.2.4, and 3.3.1, Sylius Mollie Plugin's GET /locale/thank-you PageRedirectController::thankYouAction and GET /locale/get-code QrCodeAction::fetchQrCodeFromOrder endpoints look up sequential orderId...