com.alibaba.rsocket:alibaba-broker-server (>=1.0.0.m1, <=1.0.0.rc3), com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (0.1) +108 more potentially affected by CVE-2021-33611 via org.webjars.bowergithub.vaadin:vaadin-menu-bar (>=1.0.3, <=1.2.0)

org.webjars.bowergithub.vaadin:vaadin-menu-bar MAVEN version =1.0.3, =1.0.0.m1, =1.0, =14.0.0, =1.0.0, =0.3.1, =1.0.0, =1.0.0, =0.0.3, =0.5.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.2.3 and more Source cves: CVE-2021-33611 Source advisory: OSV:GHSA-93C4-VF86-3RJ7...

Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14

Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 Vaadin 14.0.0 through 14.4.4 allows remote attackers to execute malicious JavaScript in browser by opening crafted URL...

GHSA-93C4-VF86-3RJ7 Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14

Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 Vaadin 14.0.0 through 14.4.4 allows remote attackers to execute malicious JavaScript in browser by opening crafted URL...

Cross-site Scripting (XSS)

vaadin-menu-bar is vulnerable to cross-site scripting. The vulnerability exists due to the lack of output sanitization in test sources, which allows an attacker to execute malicious javascript in the browser by opening the crafted URL...

CVE-2021-33611

Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 Vaadin 14.0.0 through 14.4.4 allows remote attackers to execute malicious JavaScript in browser by opening crafted URL...

com.alibaba.rsocket:alibaba-broker-server (>=1.0.0.m1, <=1.0.0.rc3), com.dorkbox.gradlevaadin:com.dorkbox.gradlevaadin.gradle.plugin (0.1) +108 more potentially affected by CVE-2021-33611 via org.webjars.bowergithub.vaadin:vaadin-menu-bar (>=1.0.3, <=1.2.0)

org.webjars.bowergithub.vaadin:vaadin-menu-bar MAVEN version =1.0.3, =1.0.0.m1, =1.0, =14.0.0, =1.0.0, =0.3.1, =1.0.0, =1.0.0, =0.0.3, =0.5.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.2.3 and more Source cves: CVE-2021-33611 Source advisory: MEND:CVE-2021-33611...

CVE-2021-33611

Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 Vaadin 14.0.0 through 14.4.4 allows remote attackers to execute malicious JavaScript in browser by opening crafted URL...

pyxdg Improper Code Generation Confidential Data Compromise

The vulnerability of the Python programming language library pyxdg is related to the lack of sanitization processing in xdg/Menu.py before the call to eval. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failure...

CVE-2021-33611: Improper Neutralization of Input During Web Page Generation

Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 Vaadin 14.0.0 through 14.4.4 allows remote attackers to execute malicious JavaScript in browser by opening crafted URL...

PT-2021-20231

Name of the Vulnerable Software and Affected Versions: org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 Vaadin versions 14.0.0 through 14.4.4 Description: The issue is related to missing output sanitization in test sources, allowing remote attackers to execute malicious...

CVE-2021-33611

Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 Vaadin 14.0.0 through 14.4.4 allows remote attackers to execute malicious JavaScript in browser by opening crafted URL...

CVE-2021-24722

The Restaurant Menu by MotoPress WordPress plugin before 2.4.2 does not properly sanitize or escape inputs when creating new menu items, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24722

The Restaurant Menu by MotoPress WordPress plugin before 2.4.2 does not properly sanitize or escape inputs when creating new menu items, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24722

The Restaurant Menu by MotoPress WordPress plugin before 2.4.2 does not properly sanitize or escape inputs when creating new menu items, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

Cross site scripting

The Restaurant Menu by MotoPress WordPress plugin before 2.4.2 does not properly sanitize or escape inputs when creating new menu items, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24722

The WordPress Restaurant Menu by MotoPress plugin (versions before 2.4.2) is vulnerable to a stored XSS due to inadequate sanitization/escaping when creating new menu items. This can allow an authenticated user to inject scripts that may execute in admin and public pages. Remediation: update the ...

CVE-2021-24722 Restaurant Menu by MotoPress < 2.4.2 - Admin+ Stored Cross Site Scripting

The Restaurant Menu by MotoPress WordPress plugin before 2.4.2 does not properly sanitize or escape inputs when creating new menu items, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress Restaurant Menu by MotoPress Plugin in version 2.4.0 and earlier has a cross-site scripting...

CVE-2021-24722: Improper Neutralization of Input During Web Page Generation

The Restaurant Menu by MotoPress WordPress plugin before 2.4.2 does not properly sanitize or escape inputs when creating new menu items, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

PT-2021-16225

Name of the Vulnerable Software and Affected Versions The Restaurant Menu by MotoPress WordPress plugin versions prior to 2.4.2 Description The issue concerns a lack of proper sanitization or escaping of inputs when creating new menu items, potentially allowing high-privilege users to perform...