CVE-2024-7945: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/notes/create of the component Notes Page. The manipulation of the argument Note text leads to cross...

PT-2024-38710

Name of the Vulnerable Software and Affected Versions: Laravel Property Management System version 1.0 Description: A vulnerability was found in the Laravel Property Management System, affecting an unknown functionality of the file /admin/notes/create of the component Notes Page. The manipulation ...

PT-2019-15201

Name of the Vulnerable Software and Affected Versions Apak Wholesale Floorplanning Finance versions 6.31.8.3 through 6.31.8.5 Description The issue allows an attacker to send an authenticated POST request with a malicious payload to "/WFS/agreementView.faces" which enables a stored XSS via the...

PT-2017-7287

Name of the Vulnerable Software and Affected Versions Drupal Stickynote module versions prior to 7.x-1.3 Description A cross-site scripting XSS issue allows remote authenticated users with permission to create or edit a stickynote to inject arbitrary web script or HTML via note text on the admin...

CVE-2015-7879: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Stickynote module 7.x before 7.x-1.3 for Drupal allows remote authenticated users with permission to create or edit a stickynote to inject arbitrary web script or HTML via note text on the admin listing page...

CVE-2015-1040

Multiple cross-site scripting XSS vulnerabilities in the administrative backend in BEdita 3.4.0 allow remote authenticated users to inject arbitrary web script or HTML via the 1 lrealname field in the editProfile form to index.php/home/profile; the 2 datatitle or 3 datadescription field in the...