CVE-2022-31290

A cross-site scripting XSS vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field...

CVE-2022-31290

A cross-site scripting XSS vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field...

CVE-2022-31290

A cross-site scripting XSS vulnerability in Known v1.2.2+2020061101 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field...

Known 跨站脚本漏洞

Known is an American Known open source social publishing platform. A security vulnerability exists in Known v1.3.1 and below, which stems from the presence of a cross-site scripting XSS vulnerability that allows an authenticated attacker to execute arbitrary web script or HTML via a crafted paylo...

Cross-site Scripting (XSS) - Stored in Space Name

Description Cross-site Scripting XSS - Stored in space name. Because space name is not HTML encoded, "Confirm action" modal pops up then the script is executed. Proof of Concept Step 1: Create a new Space and fill in name with this payload: "alert1. Step 2: Send an invite to victim then save. Ste...

CVE-2022-33005

A cross-site scripting XSS vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts via a crafted payload injected into the Name text field...

CVE-2022-33005

A cross-site scripting XSS vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts via a crafted payload injected into the Name text field...

Delta Electronics DIAEnergie 跨站脚本漏洞

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency. A cross-site...

CVE-2022-32987

Multiple cross-site scripting XSS vulnerabilities in /bsms/?page=manageaccount of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields...

CVE-2022-32987

Multiple cross-site scripting XSS vulnerabilities in /bsms/?page=manageaccount of Simple Bakery Shop Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username or Full Name fields...

Simple Bakery Shop Management 跨站脚本漏洞

Simple Bakery Shop Management is a bakery store management system. A security vulnerability exists in Simple Bakery Shop Management System v1.0, which originates from multiple cross-site scripting XSS vulnerabilities in /bsms/?page=manageaccount. An attacker can exploit this vulnerability to...

CVE-2022-23073

In Recipes, versions 1.0.5 through 1.2.5 are vulnerable to Stored Cross-Site Scripting XSS, in copy to clipboard functionality. When a victim accesses the food list page, then adds a new Food with a malicious javascript payload in the ‘Name’ parameter and clicks on the clipboard icon, an XSS...

CVE-2021-36608

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php...

CVE-2021-36608

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php...

CVE-2021-36609

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php...

CVE-2021-36608

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php...

Cross site scripting

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /linkedcontent/editfolder.php...

Cross site scripting

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php...

CVE-2021-36608

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php...

CVE-2021-36608

CVE-2021-36608 corresponds to a Cross Site Scripting (XSS) vulnerability in webTareas 2.2p1. The issue is triggered via the Name field in /projects/editproject.php. The connected records confirm the affected product/version and the vulnerable parameter, but do not provide details about the underl...