262 matches found
Quorum onQ 安全漏洞
Quorum onQ is a backup solution from Quorum. A security vulnerability exists in Quorum onQ version v.6.0.0.5.2064, which originates from a cross-site scripting vulnerability that allows remote attackers to obtain sensitive information via the msg parameter in the Login page...
CVE-2024-44449: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Quorum onQ OS v.6.0.0.5.2064 allows a remote attacker to obtain sensitive information via the msg parameter in the Login page...
PT-2025-3433 · Unknown · Informationpush
Name of the Vulnerable Software and Affected Versions: InformationPush master version Description: The issue allows a remote attacker to obtain sensitive information via the title, time, and msg parameters. This is a Cross Site Scripting vulnerability. Recommendations: For InformationPush master...
CVE-2024-57372
The InformationPush master version is susceptible to a Cross-Site Scripting (XSS) vulnerability (CWE-79). This flaw allows a remote attacker to obtain sensitive information by leveraging the title , time , and msg parameters. As a temporary workaround, it is recommended to restrict access to thes...
PT-2025-4780 · Wegia · Wegia
Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.6 Description: A Reflected Cross-Site Scripting XSS issue was identified in the tags.php endpoint of the WeGIA application. This issue allows attackers to inject malicious scripts in the msg e parameter due to the...
emlog 代码注入漏洞
emlog is a PHP and MySQL based CMS for personal developers of emlog. A code injection vulnerability exists in emlog 2.4.1 and earlier versions, which stems from a cross-site scripting attack caused by manipulation of the msg parameter in the /include/lib/common.php library...
PT-2024-19583 · Unknown · Boyiddha Automated-Mess-Management-System
Name of the Vulnerable Software and Affected Versions: boyiddha Automated-Mess-Management-System version 1.0 Description: A problematic vulnerability was found in the Chat Book component of the boyiddha Automated-Mess-Management-System, specifically in the file /member/chat.php. The manipulation ...
CVE-2024-25435
A cross-site scripting XSS vulnerability in Md1health Md1patient v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Msg parameter...
CVE-2024-25435
A cross-site scripting XSS vulnerability in Md1health Md1patient v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Msg parameter...
Cross site scripting
A cross-site scripting XSS vulnerability in Md1health Md1patient v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Msg parameter...
CVE-2024-25435
A cross-site scripting XSS vulnerability in Md1health Md1patient v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Msg parameter...
PT-2024-20941
Name of the Vulnerable Software and Affected Versions Md1health Md1patient version 2.0.0 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Msg parameter. This enables the execution of malicious code on th...
CVE-2024-25435
A cross-site scripting XSS vulnerability in Md1health Md1patient v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Msg parameter...
CVE-2024-25435: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Md1health Md1patient v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Msg parameter...
PT-2024-15784 · Unknown · Project Worlds Student Project Allocation System
Name of the Vulnerable Software and Affected Versions: Project Worlds Student Project Allocation System version 1.0 Description: A vulnerability was found in the Admin Login Module, specifically affecting the file admin login.php. The issue allows for cross-site scripting through the manipulation...
PT-2024-15026
Name of the Vulnerable Software and Affected Versions POST SMTP WordPress plugin versions prior to 2.8.7 Description The issue concerns a Reflected Cross-Site Scripting problem. It arises because the msg parameter is not properly sanitized and escaped before being outputted back on the page. This...
CVE-2023-6621: Improper Neutralization of Input During Web Page Generation
The POST SMTP WordPress plugin before 2.8.7 does not sanitise and escape the msg parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-6629: Improper Neutralization of Input During Web Page Generation
The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘msg’ parameter in all versions up to, and including, 2.8.6 due to insufficient input sanitization and output escaping. Th...
PT-2024-15031 · WordPress · Post Smtp Mailer/Email Log
Name of the Vulnerable Software and Affected Versions: The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress versions up to, and including, 2.8.6 Description: The issue is related to Reflected Cross-Site Scripting via the msg...