CVE-2017-16782

In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS...

Cross site scripting

In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS...

CVE-2017-16782: Improper Neutralization of Input During Web Page Generation

In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS...

PT-2017-14555

Name of the Vulnerable Software and Affected Versions Home Assistant versions prior to 0.57 Description The issue allows for the injection of JavaScript code into a persistent notification via crafted Markdown text. This can lead to a cross-site scripting XSS attack. Recommendations For versions...

Redmine cross-site scripting vulnerability (CNVD-2017-31961)

Redmine is a set of open source Web-based project management and defect tracking tools . The tool provides project management , issue tracking and role-based access control and other features . A cross-site scripting vulnerability exists in the Textile and Markdown text formatting and project hom...

FreeBSD : GitLab -- multiple vulnerabilities (418c172b-b96f-11e7-b627-d43d7e971a1b)

GitLab reports : Cross-Site Scripting XSS vulnerability in the Markdown sanitization filter Yasin Soliman via HackerOne reported a Cross-Site Scripting XSS vulnerability in the GitLab markdown sanitization filter. The sanitization filter was not properly stripping invalid characters from URL...

KeystoneJS Cross-Site Scripting Vulnerability (CNVD-2017-32889)

KeystoneJS is an open source framework for developing database-driven websites, applications and APIs. A cross-site scripting vulnerability exists in the fields/types/markdown/MarkdownType.js file in versions of KeystoneJS prior to 4.0.0-beta.7. A remote attacker can exploit this vulnerability to...

CVE-2017-15878

A cross-site scripting XSS vulnerability exists in fields/types/markdown/MarkdownType.js in KeystoneJS before 4.0.0-beta.7 via the Contact Us feature...

@arakoodev/edgechains.js (>=0.25.0, <=0.30.1), @barnas2/polymer (1.0.0) +814 more potentially affected by CVE-2015-8854 via marked (>=0.0.1, <=0.3.3)

marked NPM version =0.0.1, =0.25.0, =0.0.1, =0.0.0, =0.1.0, =2.0.5, =2.0.1, =26.0.1, =34.4.5 and more Source cves: CVE-2015-8854 Source advisory: OSV:GHSA-HJCP-J389-59FF...

@arakoodev/edgechains.js (>=0.25.0, <=0.30.1), @barnas2/polymer (1.0.0) +744 more potentially affected by CVE-2015-1370 via marked (>=0.0.1, <=0.3.2)

marked NPM version =0.0.1, =0.25.0, =0.0.1, =0.1.0, =2.0.1, =26.0.1, =0.5.0, =0.7.1 - @qsb-cli-test/command 1.0.10 and more Source cves: CVE-2015-1370 Source advisory: OSV:GHSA-CFJH-P3G4-3Q2F...

CVE-2016-10515

In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages...

CVE-2016-10515

In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages...

DEBIAN-CVE-2016-10515

In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages...

Cross site scripting

In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages...

UBUNTU-CVE-2016-10515

In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages...

CVE-2016-10515

In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages...

CVE-2016-10515

In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages...

CVE-2016-10515

In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages...

CVE-2016-10515

In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages...

CVE-2016-10515

CVE-2016-10515 affects Redmine prior to 3.2.3, with stored XSS in Textile and Markdown text formatting and project homepages. The root cause is stored cross-site scripting in user-supplied formatting that can be persisted in pages rendered by Redmine. Affected software is Redmine (versions before...