Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors...

CVE-2023-26847: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates...

OpenCats Cross-Site Request Forgery Vulnerability

OpenCats is an open source recruitment process management system. A cross-site request forgery vulnerability exists in OpenCats version 0.9.7. An attacker could exploit this vulnerability to force a user to submit a web request via an unspecified vector...

CVE-2023-26846: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates...

CVE-2023-26847

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates...

CVE-2023-26846

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates...

CVE-2023-26846

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates...

CVE-2023-26847

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates...

PT-2023-20821 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.7 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at "opencats/index.php?m=candidates". This enables...

CVE-2023-26847

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at opencats/index.php?m=candidates...

PT-2023-20822

Name of the Vulnerable Software and Affected Versions OpenCATS version 0.9.7 Description A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the state parameter at "opencats/index.php?m=candidates". This enables...

CVE-2023-26845

CVE-2023-26845 concerns OpenCATS 0.9.7 with a Cross-Site Request Forgery (CSRF) flaw. The public data states that an attacker can coerce an authenticated user into submitting web requests via unspecified vectors. The CVSS metrics (NVD/CVE sources) describe a network-attack vector with low attack ...

CVE-2023-26847

OpenCATS v0.9.7 is affected by a stored XSS vulnerability. The issue arises from untrusted input in the state parameter of opencats/index.php?m=candidates, allowing attackers to inject and execute arbitrary web scripts/HTML when the payload is processed. Affected component: OpenCATS web applicati...

CVE-2023-26846

OpenCATS 0.9.7 is affected by a stored XSS vulnerability in the city parameter of opencats/index.php?m=candidates. The issue allows execution of arbitrary web scripts/HTML in a victim’s browser. Root cause is a stored XSS in that endpoint; no fix version is provided in the documents. Practical im...

OpenCats cross-site scripting vulnerabilities

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCATS version v0.9.7. An attacker can exploit this vulnerability to execute arbitrary Web script or HTML via a specially crafted payload injected into the city parameter of...

CVE-2023-26846

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates...

CVE-2023-26846

A stored cross-site scripting XSS vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the city parameter at opencats/index.php?m=candidates...

CVE-2023-26845

A Cross-Site Request Forgery CSRF in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors...

CVE-2023-26845

A Cross-Site Request Forgery CSRF in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors...

CVE-2023-26845: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors...