15 matches found
CVE-2022-35500
Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting XSS via leave comment functionality...
EUVD-2018-18591
Malware in sbrugna...
EUVD-2022-38388
Malicious code in bioql PyPI...
Cross site scripting
Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting XSS via leave comment functionality...
CVE-2022-35500
Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting XSS via leave comment functionality...
CVE-2022-35500
Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting XSS via leave comment functionality...
PT-2022-22870 · Amasty · Amasty Blog
Name of the Vulnerable Software and Affected Versions: Amasty Blog version 2.10.3 Description: The issue is related to Cross Site Scripting XSS via the leave comment functionality. This means an attacker could potentially inject malicious scripts into the website, affecting user sessions...
Code Injection in microweber/microweber
Description HTML Injection is a vulnerability in which the attacker can inject malicious html content in the webpage. Proof of Concept 1 Admin has enabled Comments module, so that people can comment on a blog post. 2 Attacker post the following comment: SOMETHING+SOMETHING Now, observe the change...
PHP Scripts Mall Multi Language Olx Clone Script Cross Site Scripting Vulnerability
PHP Scripts Mall Multi Language Olx Clone Script is a set of PHP based scripts for multilingual information publishing websites from PHP Scripts Mall, India. A cross-site scripting vulnerability exists in PHP Scripts Mall Multi Language Olx Clone Script version 2.0.6. A remote attacker can exploi...
CVE-2018-6845
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
Design/Logic Flaw
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
CVE-2018-6845
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
CVE-2018-6845
The CVE-2018-6845 entry concerns PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 and a Cross-Site Scripting (XSS) vulnerability exposed via the Leave Comment field. The CNVD/NVD records confirm a stored/reflected XSS pathway where user-supplied input in comments can inject arbitrary script...
CVE-2018-6845
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field...
Cross site scripting
Cross-site scripting XSS vulnerability in the leave comment feedback feature in Typo 5.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 commentauthor Name and 2 commenturl Website parameters...