CVE-2019-20151: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in TreasuryXpress 19191105. Due to the lack of filtering and sanitization of user input, malicious JavaScript can be executed by the application's administrators. A malicious payload can be injected within the Multi Approval security component and inserted via the Note...

CVE-2019-17223

There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...

UBUNTU-CVE-2019-17223

There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...

CVE-2019-17223

There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...

CVE-2019-17223: Improper Neutralization of Input During Web Page Generation

There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...

PT-2019-15016 · Dolibarr · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 10.0.2 Description: The issue concerns HTML Injection in the Note field, specifically via the user/note.php endpoint. This allows for potential malicious code injection. Recommendations: For Dolibarr ERP/CRM version...

CVE-2017-18563

The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen...

CVE-2017-18563: Improper Neutralization of Input During Web Page Generation

The rsvp plugin before 2.3.8 for WordPress has persistent XSS via the note field on the attendee-list screen...

CVE-2018-5411

Pixar's Tractor software, versions 2.2 and earlier, contain a stored cross-site scripting vulnerability in the field that allows a user to add a note to an existing node. The stored information is displayed when a user requests information about the node. An attacker could insert Javascript into...

PT-2018-16947

Name of the Vulnerable Software and Affected Versions Pixar's Tractor software versions 2.2 and earlier Description The issue concerns a stored cross-site scripting problem in a field where users can add notes to existing nodes. This allows an attacker to insert Javascript code into the note fiel...

CVE-2018-5411: Improper Neutralization of Input During Web Page Generation

Pixar's Tractor software, versions 2.2 and earlier, contain a stored cross-site scripting vulnerability in the field that allows a user to add a note to an existing node. The stored information is displayed when a user requests information about the node. An attacker could insert Javascript into...

CVE-2018-8737

Bookme Control Panel 2.0 Application is vulnerable to stored XSS within the Customers "Book Me" function. Within the Name and Note aka custName and custNote sections of the Customers screen, the application does not sanitize user-supplied input and renders injected JavaScript code to the user's...

Cross site scripting

Cross-site scripting XSS vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change...

CVE-2015-3186: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Apache Ambari before 2.1.0 allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change...

PT-2015-6089

Name of the Vulnerable Software and Affected Versions Apache Ambari versions prior to 2.1.0 Description A cross-site scripting XSS issue allows remote authenticated cluster operator users to inject arbitrary web script or HTML via the note field in a configuration change. Recommendations For...