PT-2021-10584

Name of the Vulnerable Software and Affected Versions: Maccms version 8.0 Description: A cross-site scripting XSS vulnerability in the background administrator article management module allows attackers to steal administrator and user cookies via crafted payloads in the text fields for Chinese an...

CVE-2020-20347

Affected software: WTCMS 1.0. Vulnerability type & location: stored cross-site scripting (XSS) in the article management module, in the source field. Root cause (as stated): input is stored and later displayed without proper sanitization. Impact implied by description: script payload could be exe...

PT-2021-10482

Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue is a stored cross-site scripting XSS vulnerability. It is located in the source field under the article management module. This type of vulnerability allows an attacker to inject malicious scripts into...

PT-2021-10483

Name of the Vulnerable Software and Affected Versions: WTCMS version 1.0 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability is located in the link field under the background menu management module. Recommendations: For WTCMS version 1.0,...

CVE-2020-20347: Improper Neutralization of Input During Web Page Generation

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the source field under the article management module...

CVE-2020-20348: Improper Neutralization of Input During Web Page Generation

WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the link field under the background menu management module...

F5 BIG-IP 输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. F5 BIG-IP compression driver denial of service vulnerability, on platforms using Intel QuickAssist Technology QAT compression...

CVE-2021-33347

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

PT-2021-20122

Name of the Vulnerable Software and Affected Versions JPress versions 3.3.0 and below Description An issue was discovered in the template module and tag management module, leading to XSS vulnerabilities. If a user logs in to the background using a weak password, a storage XSS vulnerability can...

JPress 跨站脚本漏洞

Jpress is a set of blogging platform developed in Java language by Jpress team. A cross-site scripting vulnerability exists in JPress v3.3.0 and below, which originates from the template module and tag management module...

CVE-2021-33347: Improper Neutralization of Input During Web Page Generation

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

CMSWing Cross-Site Scripting Vulnerability

CMSWing is an e-commerce platform and CMS building system based on ThinkJS and MySQL. A cross-site scripting vulnerability exists in CmsWing version 1.3.7, which stems from a vulnerability that is triggered when an administrator accesses the content management module. No detailed vulnerability...

CVE-2020-24992

There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability stored XSS is triggered when an administrator accesses the content management module...

Cross site scripting

There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability stored XSS is triggered when an administrator accesses the content management module...

CVE-2020-24992

There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability stored XSS is triggered when an administrator accesses the content management module...

PT-2021-11096

Name of the Vulnerable Software and Affected Versions: CmsWing version 1.3.7 Description: The issue is a cross-site scripting vulnerability, specifically a stored XSS. It is triggered when an administrator accesses the content management module. Recommendations: For CmsWing version 1.3.7, conside...

CMSWing跨站脚本漏洞

CMSWing is an e-commerce platform and CMS building system based on ThinkJS and MySQL. A cross-site scripting vulnerability exists in CmsWing version 1.3.7, which stems from a vulnerability that is triggered when an administrator accesses the content management module. No detailed vulnerability...

CVE-2020-24992: Improper Neutralization of Input During Web Page Generation

There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability stored XSS is triggered when an administrator accesses the content management module...

CVE-2021-23009

On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may cause an infinite loop which causes a Denial of Service for Data Plane traffic. TMM takes the configured HA action when the TMM process is aborted. There is no control plane exposure, this is a data...

CVE-2021-27437

The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. The system contains a hard-coded administrator username and password that can be used to query Grafana APIs. Authentication is not required for exploitation on the WISE-PaaS/RMM versions prior to...