Lucene search
+L

46 matches found

OSV
OSV
•added 2021/03/15 5:15 p.m.•15 views

CVE-2021-27695

Multiple stored cross-site scripting XSS vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any "Add" sections, such as Add Card Building & Floor, or others in the Name and Code Parameters...

6.1CVSS5.9AI score0.03011EPSS
SaveExploits2References2
Prion
Prion
•added 2021/03/15 5:15 p.m.•23 views

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any "Add" sections, such as Add Card Building & Floor, or others in the Name and Code Parameters...

4.3CVSS6AI score0.03011EPSS
SaveExploits2References2Affected Software1
Mend
Mend
•added 2020/12/31 5:06 p.m.•1 views

CVE-2020-25797

LimeSurvey 3.21.1 is affected by cross-site scripting XSS in the Add Participants Function First and last name parameters. When the survey participant being edited, e.g. by an administrative user, the JavaScript code will be executed in the browser...

5.4CVSS0.00705EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/31 12:00 a.m.•9 views

CVE-2020-25797: Improper Neutralization of Input During Web Page Generation

LimeSurvey 3.21.1 is affected by cross-site scripting XSS in the Add Participants Function First and last name parameters. When the survey participant being edited, e.g. by an administrative user, the JavaScript code will be executed in the browser...

5.4CVSS5.7AI score0.00705EPSS
SaveExploits1References2
NVD
NVD
•added 2006/06/24 1:06 a.m.•37 views

CVE-2006-3212

Cross-site scripting XSS vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject web script or HTML via the 1 name, 2 email, 3 add, and 4 wName parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

4.3CVSS5.6AI score0.0118EPSS
SaveExploits0References4
CVE
CVE
•added 2002/08/31 4:00 a.m.•52 views

CVE-2002-0948

The CVE-2002-0948 entry concerns Scripts For Educators MakeBook 2.2 CGI, where the (1) Name and (2) Email parameters are not properly filtered. This allows remote attackers to execute arbitrary scripts as other visitors, or to trigger server-side includes (SSI) with the web server context. The NV...

7.5CVSS7.4AI score0.07629EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder