Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

Adobe Experience Manager 跨站脚本漏洞

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. The solution supports mobile content management, marketing and sales campaign management, and multi-site management, etc. A cross-site scripting vulnerabilit...

Cross-Site Scripting (XSS)

claviska/jquery-minicolors is vulnerable to cross-site scripting. The vulnerability exists because of the lack of sanitization in the name attribute in jquery.minicolors.min.js, allowing an attacker to inject and execute malicious JavaScript...

Siemens PLM Help Server 跨站脚本漏洞

PLM Help Server is a document server used to host help or manual files. A cross-site scripting vulnerability exists in Siemens PLM Help Server V4.2, which can be exploited by an attacker to execute malicious javascript code by tricking a user into visiting a malicious link...

CVE-2022-44575

A vulnerability has been identified in PLM Help Server V4.2 All versions. A reflected cross-site scripting XSS vulnerability exists in the web interface of the affected application that could allow an attacker to execute malicious javascript code by tricking users into accessing a malicious link...

PT-2022-5956 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue is a reflected Cross-Site Scripting XSS vulnerability. It can be exploited if an attacker convinces a victim to visit a URL referencing a vulnerable page, allowing...

PT-2022-5997 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue is related to a reflected Cross-Site Scripting XSS vulnerability. It can be exploited if an attacker convinces a victim to visit a URL referencing a vulnerable page,...

Cross-site Scripting (XSS)

thinkcmf/thinkcmf is vulnerable to cross-site scripting.The vulnerability exists in multiple functions due to insufficient sanitization of the slideshow management section which allows an attacker to inject and execute malicious JavaScript into the system...

Cross-site Scripting (XSS)

baserproject/basercms is vulnerable to cross-site scripting. The vulnerability exists due to insufficient sanitization of user-supplied data in user group management feature which allows an attacker to inject and execute malicious javaScript on victim's browser...

Cross-site Scripting (XSS)

baserproject/basercms is vulnerable to cross-site scripting. The vulnerability exists due to insufficient sanitization of user-supplied data in the permission settings feature which allows an attacker to inject and execute malicious JavaScript on the victim's browser...

Cross-site Scripting (XSS)

baserproject/basercms is vulnerable to cross-site scripting. The vulnerability exists when the management system is used by an unspecified number of users which allows an attacker to inject and execute malicious JavaScript...

Cross-site Scripting (XSS)

spatie/browsershot is vulnerable to cross-site scripting. The vulnerability exists due to the lack of file:// validation in the html content of Browsershot.php which allows a remote attacker to inject and execute malicious JavaScript into the system...

baserCMS 跨站脚本漏洞

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A cross-site scripting vulnerability exists in baserCMS 4.7.1 and earlier versions, which can be exploited by an attacker to execute malicious JavaScript code that may alter the display of a page or disclose...

Cross-site Scripting (XSS)

moodle/moodle is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validation in the user-supplied input for field.class.php and helper.php which allows a remote attacker to inject and execute malicious JavaScript into the system...

Cross-site Scripting (XSS)

silverstripe/versioned-admin is vulnerable to cross-site scripting.The vulnerability exists in the Value function of DiffField.php due to non-html fields in diff which allows an attacker to inject and execute malicious JavaScript via compare mode...

Cross-Site Scripting (XSS)

activemq is vulnerable to cross-site scripting attacks. The vulnerability exists in the web based administration console on the message.jsp which allows an attacker to inject and execute malicious javascript...

Cross-site Scripting (XSS)

kiwitcms is vulnerable to cross-site scripting. The vulnerability exists in diffobjects function in history.py due to lack of validation of the store values which allows a remote attacker to inject and execute malicious javascript into system...

Moodle 跨站脚本漏洞

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in Moodle versions 3.9.0 and later, 3.9.18 and earlier, 3.11.0 and later, 3.11.11 and...

DOM-based Cross-site Scripting (DXSS) Vulnerability

Description Two CalendarXP products have DXSS vulnerability in common parts of HTML files. CalendarXP FlatCalendarXP through 10.0.1 has DXSS vulnerability in iflateng.htm and nflateng.htm, and CalendarXP PopCalendarXP through 10.0.1 has DXSS vulnerability in ipopeng.htm and npopeng.htm. Proof of...

GHSA-HF94-8MX5-2VVJ Cross-site Scripting in kiwitcms

A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack clickjacking and an HTML injection which disables the use of the history page...