PT-2022-15830

Name of the Vulnerable Software and Affected Versions Recipes versions 1.0.5 through 1.2.5 Description The issue concerns Stored Cross-Site Scripting XSS in the "Add to Cart" functionality. When a victim accesses the food list page, adds a new Food with a malicious javascript payload in the Name...

PT-2022-20987 · Unknown · Online Discussion Forum Site

Name of the Vulnerable Software and Affected Versions: Online Discussion Forum Site version 1.0 Description: The issue is related to Cross Site Scripting XSS via the "/odfs/classes/Master.php?f=save category" API endpoint, specifically affecting the name variable. This allows for potential...

PT-2022-8292 · Wolfcms · Wolf Cms

Name of the Vulnerable Software and Affected Versions: WolfCMS versions up to 0.8.3.1 Description: A vulnerability was found in WolfCMS that affects the processing of the file /wolfcms/?/admin/user/add of the component User Add. The manipulation of the name argument leads to basic cross site...

CVE-2022-30482

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...

CVE-2022-29734

A cross-site scripting XSS vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...

CVE-2022-29734

A cross-site scripting XSS vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...

CVE-2022-29734

A cross-site scripting XSS vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...

Cross site scripting

A cross-site scripting XSS vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...

ICT Protege GX和ICT Protege WX 跨站脚本漏洞

ICT Protege GX and ICT Protege WX are both products of ICT Corporation.ICT Protege GX is an enterprise-grade integrated access control, intruder detection, and building automation solution with an easy-to-operate, easy-to-integrate, and easy-to-scalable feature set.ICT Protege WX is a game-changi...

PT-2022-9864

Name of the Vulnerable Software and Affected Versions HCL Traveler affected versions not specified Description The issue is caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages, leading to a cross-site scripting XSS vulnerability. ...

CVE-2021-27778

HCL Traveler is vulnerable to a cross-site scripting XSS caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerability to execute a malicious script to access any cookies, session tokens, or oth...

HCL Technologies Traveler Companion 跨站脚本漏洞

HCL Technologies Traveler Companion is an ios Iphone and Ipad application from HCL Technologies, India. It is used to read encrypted Hcl Notes emails on Apple devices.A cross-site scripting vulnerability exists in HCL Technologies Traveler Companion version 12.0.1.0 and earlier, which stems from...

CVE-2021-27778: Improper Neutralization of Input During Web Page Generation

HCL Traveler is vulnerable to a cross-site scripting XSS caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerability to execute a malicious script to access any cookies, session tokens, or oth...

CVE-2022-29734

CVE-2022-29734 affects ICT Protege GX/WX version 2.08. The vulnerability is an XSS issue where an authenticated attacker can inject a crafted payload into the Name parameter to execute arbitrary web scripts/HTML in the victim’s browser. Multiple connected sources corroborate an authenticated XSS ...

CVE-2022-29734: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter...

PT-2022-19807

Name of the Vulnerable Software and Affected Versions ICT Protege GX/WX version 2.08 Description A cross-site scripting XSS issue allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter. Recommendations For ICT Protege GX/WX...

Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter

Liferay CMS Portal version 7.1.3 and 7.2.1 have a blind persistent cross-site scripting XSS vulnerability in the user name parameter to Calendar. An attacker can insert the malicious payload on the username, lastname or surname fields of its own profile, and the malicious payload will be injected...

GHSA-PVPG-9553-F979 Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via User Name Parameter

Liferay CMS Portal version 7.1.3 and 7.2.1 have a blind persistent cross-site scripting XSS vulnerability in the user name parameter to Calendar. An attacker can insert the malicious payload on the username, lastname or surname fields of its own profile, and the malicious payload will be injected...

CVE-2022-30839

Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting XSS via /rrps/classes/Master.php?f=savecategory, vehiclename...

PT-2022-20351 · Unknown · Toll Tax Management System

Name of the Vulnerable Software and Affected Versions: Toll-tax-management-system version 1.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the API endpoint "/ttms/classes/Master.php" with the parameter f set to "save recipient" and the vehicle...