CVE-2023-6364

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting XSS vulnerability has been identified. It is possible for an attacker to craft a XSS payload and store that value within a dashboard component. If a WhatsUp Gold user interacts with the crafted payload, the attacker...

CVE-2023-6366 WhatsUp Gold Stored Cross-Site Scripting (XSS) via Alert Center

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting XSS vulnerability has been identified. It is possible for an attacker to craft a XSS payload and store that value within Alert Center. If a WhatsUp Gold user interacts with the crafted payload, the attacker would be...

PT-2023-32630

Name of the Vulnerable Software and Affected Versions WhatsUp Gold versions prior to 2023.1 Description A stored cross-site scripting XSS issue has been identified, allowing an attacker to craft a XSS payload and store it within Roles. If a WhatsUp Gold user interacts with the crafted payload, th...

PT-2023-8139

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.18 and earlier Description The issue is related to a Cross-site Scripting DOM-based XSS vulnerability. It can be exploited if a low-privileged attacker convinces a victim to visit a URL referencing a...

PT-2023-7802 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to the lack of protection of the web page structure in Adobe Experience Manager AEM, which can be exploited by a remote attacker to execute arbitrary code....

PT-2023-8140

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.18 and earlier Description The issue is related to a Cross-site Scripting DOM-based XSS vulnerability. It can be exploited if a low-privileged attacker convinces a victim to visit a URL referencing a...

PT-2023-8638 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue exists due to inadequate protection of the web page structure. Exploitation may allow a remote attacker to execute arbitrary code. A low-privileged attacker can...

PT-2023-8137

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.18 and earlier Description The issue is related to the lack of protection of the web page structure in Adobe Experience Manager, which can be exploited by a remote attacker to perform a Cross-Site Scriptin...

PT-2023-7740

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.18 and earlier Description The issue is related to the lack of protection of the web page structure in Adobe Experience Manager AEM, which can be exploited by a remote attacker to execute arbitrary code. A...

PT-2023-7835

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.18 and earlier Description The issue is related to a Cross-site Scripting DOM-based XSS vulnerability. It can be exploited if a low-privileged attacker convinces a victim to visit a URL referencing a...

PT-2023-7851 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to the lack of protection of the web page structure in Adobe Experience Manager AEM, which can be exploited by a remote attacker to execute arbitrary code....

CVE-2023-6333

The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's session...

CVE-2023-6333

The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's session...

CVE-2023-6333

The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's session...

CVE-2023-6333 Cross-site Scripting in ControlByWeb Relays

The affected ControlByWeb Relay products are vulnerable to a stored cross-site scripting vulnerability, which could allow an attacker to inject arbitrary scripts into the endpoint of a web interface that could run malicious javascript code during a user's session...

Control By Web Relay Cross-Site Scripting Vulnerability

Control By Web Relay is a web control relay from Control By Web. A security vulnerability exists in Control By Web Relay X-332 and X-301, which stems from susceptibility to a stored cross-site scripting vulnerability that could allow an attacker to inject arbitrary script into the endpoints of a...

Cross-site Scripting (XSS)

vite is vulnerable to Cross-Site Scripting. This vulnerability exists because it does not properly sanitize inline scripts in the server.transformIndexHtml function, allowing an attacker to inject and execute malicious JavaScript into the browser. This vulnerability is only exploitable if the...

CVE-2023-49077

Mailcow: dockerized is an open source groupware/email suite based on docker. A Cross-Site Scripting XSS vulnerability has been identified within the Quarantine UI of the system. This vulnerability poses a significant threat to administrators who utilize the Quarantine feature. An attacker can sen...

mailcow dockerized cross-site scripting vulnerability

mailcow is a mail server suite. A cross-site scripting vulnerability exists in mailcow dockerized, which stems from a cross-site scripting XSS vulnerability in the system's Quarantine UI, which can be exploited by an attacker to send a crafted email containing malicious JavaScript code...

PT-2023-31045

Name of the Vulnerable Software and Affected Versions Mailcow: dockerized versions prior to 2023-11 Description A Cross-Site Scripting XSS issue has been identified within the Quarantine UI of the system, posing a significant threat to administrators who utilize the Quarantine feature. An attacke...