CVE-2023-26846

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates...

OpenCats 跨站脚本漏洞

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCATS version v0.9.7. An attacker can exploit this vulnerability to execute arbitrary Web script or HTML via a specially crafted payload injected into the city parameter of...

OpenCats 跨站请求伪造漏洞

OpenCats is an open source recruitment process management system. A cross-site request forgery vulnerability exists in OpenCats version 0.9.7. An attacker could exploit this vulnerability to force a user to submit a web request via an unspecified vector...

OpenCats 跨站脚本漏洞

OpenCATS is a leading open source applicant tracking system for recruiters and companies. A security vulnerability exists in OpenCats v0.9.7. An attacker could use the vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the state parameter of...

CVE-2023-26845

A Cross-Site Request Forgery CSRF in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors...

CVE-2023-26846

OpenCATS 0.9.7 is affected by a stored XSS vulnerability in the city parameter of opencats/index.php?m=candidates. The issue allows execution of arbitrary web scripts/HTML in a victim’s browser. Root cause is a stored XSS in that endpoint; no fix version is provided in the documents. Practical im...

PT-2023-20821 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.7 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at "opencats/index.php?m=candidates". This enables...

CVE-2023-26845

CVE-2023-26845 concerns OpenCATS 0.9.7 with a Cross-Site Request Forgery (CSRF) flaw. The public data states that an attacker can coerce an authenticated user into submitting web requests via unspecified vectors. The CVSS metrics (NVD/CVE sources) describe a network-attack vector with low attack ...

CVE-2023-26847

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates...

CVE-2023-26846

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates...

CVE-2023-26847

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates...

CVE-2023-26847

OpenCATS v0.9.7 is affected by a stored XSS vulnerability. The issue arises from untrusted input in the state parameter of opencats/index.php?m=candidates, allowing attackers to inject and execute arbitrary web scripts/HTML when the payload is processed. Affected component: OpenCATS web applicati...

CVE-2023-27292

An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...

CVE-2023-27295

Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can exploit this issue by creating a dummy page that executes Javascript in an authenticated user's session when visited...

CVE-2023-27295

Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can exploit this issue by creating a dummy page that executes Javascript in an authenticated user's session when visited...

CVE-2023-27292

An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...

Cross site request forgery (csrf)

Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can exploit this issue by creating a dummy page that executes Javascript in an authenticated user's session when visited...

Open redirect

An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters...

CVE-2023-27295

Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can exploit this issue by creating a dummy page that executes Javascript in an authenticated user's session when visited...

OpenCats 跨站脚本漏洞

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version 0.9.6, which stems from improper input neutralization and can be exploited by an attacker to steal cookies from other users...