CVE-2021-24157

The CVE-2021-24157 issue affects Orbit Fox by ThemeIsle WordPress plugin. Affected component: the header/footer script injection feature in Orbit Fox; root cause: no validation of user capabilities (unfiltered_html) before saving script tags, enablingAuthenticated users with lower privileges to i...

PT-2021-15609

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions prior to 2020.2.12 Description: A cross-site scripting XSS issue was found in webviews, which could potentially allow malicious scripts to be executed. Recommendations: For versions prior to...

PT-2021-15612

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions prior to 2020.3 Description: A cross-site scripting XSS issue was found in entries of type Document, which could potentially allow malicious scripts to be executed. Recommendations: For versions prior to 2020.3,...

Cross-site Scripting (XSS)

spoon/library is vulnerable to cross-site scripting XSS attacks. A specifically crafted string injected through form attribute placeholders allows remote attackers to execute malicious scripts...

PT-2021-17496

Name of the Vulnerable Software and Affected Versions DynPG version 4.9.2 Description A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the refID parameter. This enables attackers to execute malicious scripts on the victim's browser. Recommendations For DynPG versi...

PT-2021-10087

Name of the Vulnerable Software and Affected Versions: Fujitsu ServerView Suite iRMC versions prior to 9.62F Description: The issue allows an authenticated attacker to store an XSS payload in the PSCU FILE INIT field of a Save Configuration XML document. The payload is triggered in the HTTP error...

GE Grid Solutions UR 跨站脚本漏洞

GE Grid Solutions UR is an embedded operating system from GE Grid Solutions, France. It provides high-performance protection, scalable I/O, integrated monitoring and metering, high-speed communications, and extensive programming and configuration capabilities. A cross-site scripting vulnerability...

PT-2021-17855

Name of the Vulnerable Software and Affected Versions: aimeos versions prior to 19.10.12 aimeos versions 20.x prior to 20.10.5 Description: The issue allows Cross-site Scripting XSS via a backend user account. This can be exploited to execute malicious scripts in the context of the affected...

PT-2021-11812

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions prior to 7066 Description: The issue allows for XSS, which is a type of attack that can occur when an application takes user input and sends it to a web browser without proper validation or escaping...

PT-2021-10904

Name of the Vulnerable Software and Affected Versions UltimateKode Neo Billing - Accounting, Invoicing And CRM Software versions up to 3.5 Description The issue allows remote attackers to inject arbitrary web script or HTML, due to a Cross Site Scripting XSS vulnerability. This enables attackers ...

Exploit for Cross-site Scripting in Digisol Dg-Hr3400_Firmware

CVE-2020-35262: Stored XSS in Digisol DG-HR3400 Router...

Cross-site Scripting (XSS)

s-cart is vulnerable to cross-site scirpting XSS. An attacker is able to inject and execute malicious script via the search functionality of the admin dashboard in core/src/Admin/Controllers/AdminOrderController.phpindex...

PT-2020-16336

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC9 versions prior to 4.32.10.00 Dell EMC iDRAC9 versions prior to 4.40.00.00 Description The issue is a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote attacker could potentially exploit this t...

CVE-2020-24445

AEM's Cloud Service offering, as well as version 6.5.6.0 and below, are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they...

CVE-2020-24445

AEM's Cloud Service offering, as well as version 6.5.6.0 and below, are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they...

Cross site scripting

AEM's Cloud Service offering, as well as version 6.5.6.0 and below, are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they...

SAP Solution Manager 路径遍历漏洞

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

Cross-site Scripting (XSS)

Overview markdown-it-prism is a The plugin will insert the necessary markup into all code blocks. Include one of Prism’s stylesheets in your HTML to get highlighted code. Affected versions of this package are vulnerable to Cross-site Scripting XSS. It is possible to insert malicious JavaScript as...

Cross site scripting

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...

CVE-2020-6876: Improper Neutralization of Input During Web Page Generation

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...