Lucene search
K

374 matches found

CNNVD
CNNVD
added 2023/07/22 12:0 a.m.3 views

Bug Finder ICOGenie 跨站脚本漏洞

Bug Finder ICOGenie is a powerful and versatile script from Bug Finder, Inc. designed to easily launch and manage successful token products. A cross-site scripting vulnerability exists in Bug Finder ICOGenie version 1.0, which stems from the presence of unknown code in the file /user/ticket/creat...

6.1CVSS4.6AI score0.00075EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/07/22 12:0 a.m.4 views

Bug Finder EX-RATE 跨站脚本漏洞

Bug Finder EX-RATE is a currency exchange solution from Bug Finder, Inc. A cross-site scripting vulnerability exists in Bug Finder EX-RATE version 1.0, which stems from some unknown processing in the file /user/ticket/create in the component Ticket Handler, leading to cross-site scripting via the...

6.1CVSS4.5AI score0.00057EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/07/22 12:0 a.m.3 views

Bug Finder Wedding Wonders 跨站脚本漏洞

Bug Finder Wedding Wonders is a matchmaking and marriage platform from Bug Finder, Inc. A cross-site scripting vulnerability exists in Bug Finder Wedding Wonders version 1.0, which stems from some unknown processing in the file /user/ticket/create in the component Ticket Handler, leading to...

6.1CVSS4.5AI score0.00097EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/07/22 12:0 a.m.3 views

Bug Finder Montage 跨站脚本漏洞

Bug Finder Montage is a complete web platform for hotel/resort booking and property sales solutions from Bug Finder, Inc. A cross-site scripting vulnerability exists in Bug Finder Montage version 1.0, which stems from some unknown processing in the file /user/ticket/create in the component Ticket...

6.1CVSS4.5AI score0.00097EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/07/22 12:0 a.m.4 views

Bug Finder MineStack 跨站脚本漏洞

Bug Finder MineStack is a digital mining platform from Bug Finder, Inc. A cross-site scripting vulnerability exists in Bug Finder MineStack version 1.0, which stems from some unknown processing in the file /user/ticket/create in the component Ticket Handler, leading to cross-site scripting via th...

6.1CVSS4.5AI score0.00097EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/07/22 12:0 a.m.3 views

PT-2023-26364 · Unknown · Bug Finder Montage

Name of the Vulnerable Software and Affected Versions: Bug Finder Montage version 1.0 Description: A vulnerability was found in the Ticket Handler component, specifically in the unknown functionality of the file /user/ticket/create. The manipulation of the message argument leads to cross-site...

6.1CVSS4.1AI score0.00097EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/07/22 12:0 a.m.3 views

PT-2023-26340 · Unknown · Bug Finder Listplace Directory Listing Platform

Name of the Vulnerable Software and Affected Versions: Bug Finder Listplace Directory Listing Platform version 3.0 Description: A vulnerability was found in the HTTP POST Request Handler component, specifically affecting some unknown functionality of the file /listplace/user/ticket/create. The...

6.1CVSS4.3AI score0.00075EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/07/22 12:0 a.m.3 views

Bug Finder Listplace 跨站脚本漏洞

Bug Finder Listplace is a powerful directory listing platform from Bug Finder, Inc. A cross-site scripting vulnerability exists in Bug Finder Listplace Directory Listing Platform version 3.0, which stems from an unknown function in the file /listplace/user/ticket/create in the component's HTTP PO...

6.1CVSS4.2AI score0.00075EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/07/19 12:0 a.m.2 views

PT-2023-26014 · Creativeitem · Ekushey Project Manager Crm

Name of the Vulnerable Software and Affected Versions: Creativeitem Ekushey Project Manager CRM version 5.0 Description: A problematic vulnerability was found in the software, affecting an unknown function of the file /index.php/client/message/message read/xxxxxxxxrandom-msg-hash. The manipulatio...

6.1CVSS4.2AI score0.00075EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/07/19 12:0 a.m.3 views

Creativeitem Ekushey Project Manager CRM 跨站脚本漏洞

Creativeitem Ekushey Project Manager CRM is a project management application from Creativeitem Bangladesh. A cross-site scripting vulnerability exists in Creativeitem Ekushey Project Manager CRM version 5.0, which stems from a cross-site scripting XSS vulnerability in the parameter message...

6.1CVSS4.7AI score0.00075EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/06/16 4:15 p.m.0 views

CVE-2023-30453

The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter...

5.4CVSS5.9AI score0.00106EPSS
Exploits0References3
Prion
Prion
added 2023/06/16 4:15 p.m.16 views

Cross site scripting

The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter...

4.9CVSS5.3AI score0.00106EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2023/06/16 12:0 a.m.2 views

Atlassian Jira Teamlead Reminder plugin 跨站脚本漏洞

Teamlead Reminder is a plugin from Teamlead, Inc. A security vulnerability exists in Atlassian Jira Teamlead Reminder plugin version 2.6.5, which originates from a stored cross-site scripting attack via the message parameter...

5.4CVSS5.3AI score0.00106EPSS
Exploits0References3
OSV
OSV
added 2023/05/27 8:15 a.m.1 views

CVE-2023-2922

A vulnerability classified as problematic has been found in SourceCodester Comment System 1.0. Affected is an unknown function of the file index.php of the component GET Parameter Handler. The manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack...

6.1CVSS3.8AI score
Exploits0References3
CNNVD
CNNVD
added 2023/05/27 12:0 a.m.2 views

SourceCodester Comment System 跨站脚本漏洞

Plohni Advanced Comment System is a comment system by Plohni Individual Developers. A cross-site scripting vulnerability exists in SourceCodester Comment System version 1.0 due to an unknown function in the file index.php in the component GET Parameter Handler, which could lead to cross-site...

6.1CVSS4.5AI score0.00245EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/05/12 12:0 a.m.1 views

Lost and Found Information System 跨站脚本漏洞

Lost and Found Information System is a lost and found information system by the individual developer of oretnom23. A cross-site scripting vulnerability exists in Lost and Found Information System version 1.0, which stems from the fact that incorrect manipulation of the parameters...

6.1CVSS4.2AI score0.00208EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/05/12 12:0 a.m.4 views

PT-2023-23367 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop version 1.7.7.4 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter in "/contactform/contactform.php". Recommendations: F...

6.1CVSS5.6AI score
Exploits0References6
OSV
OSV
added 2023/05/08 2:15 p.m.2 views

CVE-2023-1806

The WP Inventory Manager WordPress plugin before 2.1.0.12 does not sanitise and escape the message parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administrators...

6.1CVSS5.8AI score0.00199EPSS
Exploits2References1
Vulnrichment
Vulnrichment
added 2023/05/08 1:58 p.m.5 views

CVE-2023-1806 WP Inventory Manager < 2.1.0.12 - Reflected XSS

The WP Inventory Manager WordPress plugin before 2.1.0.12 does not sanitise and escape the message parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administrators...

6AI score0.00199EPSS
Exploits2References1
CNNVD
CNNVD
added 2023/04/20 12:0 a.m.3 views

eslint-detailed-reporter 跨站脚本漏洞

eslint-detailed-reporter is a detailed HTML reporting program for ESLINT by the individual developer Marcelo Sauerbrunn Portugal. A cross-site scripting vulnerability exists in eslint-detailed-reporter prior to version 0.9.0, which stems from a security issue in the function renderIssue in the...

6.1CVSS4.7AI score0.00246EPSS
Exploits0References6
Rows per page
Query Builder