htmly 跨站脚本漏洞

htmly is a simple and fast database-free PHP blogging platform and flat file CMS. htmly version 2.8.1 has a vulnerability in the "content" field of the "regular post" page in the "add content" menu of the dashboard. field of the "add content" menu in the dashboard is vulnerable to a stored...

CVE-2020-19618

Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...

CVE-2020-19618

Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...

Cross site scripting

Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...

CVE-2020-19618

Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...

PT-2021-10376

Name of the Vulnerable Software and Affected Versions: mblog version 3.5 Description: A Cross Site Scripting XSS issue exists, allowing attackers to inject malicious scripts via the post content field to the "/post/editing" API endpoint. Recommendations: For mblog version 3.5, update the post...

CVE-2020-19618: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...

CVE-2020-12071

Anchor 0.12.7 allows admins to cause XSS via crafted post content...

CVE-2020-12071

Anchor 0.12.7 allows admins to cause XSS via crafted post content...

CVE-2020-12071

Anchor 0.12.7 allows admins to cause XSS via crafted post content...

CVE-2020-12071

Anchor 0.12.7 allows admins to cause XSS via crafted post content...

CVE-2020-12071

Anchor CMS 0.12.7 is affected by an XSS vulnerability that allows an admin (privileged user) to inject crafted post content, triggering script execution in other users’ browsers. The issue is described across multiple sources as a cross-site scripting flaw stemming from the post creation feature;...

Cross-site Scripting

Anch allows admins to cause XSS via crafted post content...

PT-2020-13024

Name of the Vulnerable Software and Affected Versions Anchor version 0.12.7 Description The issue allows admins to cause cross-site scripting XSS via crafted post content. Recommendations For Anchor version 0.12.7, consider restricting the ability of admins to post crafted content until a fix is...

CVE-2020-12071: Improper Neutralization of Input During Web Page Generation

Anchor 0.12.7 allows admins to cause XSS via crafted post content...

CVE-2015-4039

Multiple cross-site scripting XSS vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via unspecified 1 profile fields or 2 new post content. NOTE: CVE-2015-4038 can be used to bypass the administrator confirmatio...

CVE-2015-4039: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the WP Membership plugin 1.2.3 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via unspecified 1 profile fields or 2 new post content. NOTE: CVE-2015-4038 can be used to bypass the administrator confirmatio...

PT-2020-7841

Name of the Vulnerable Software and Affected Versions: WP Membership plugin version 1.2.3 Description: The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified profile fields or new post content, potentially leading to cross-site scripting XSS attacks. Th...

ElegantThemes (Divi, Extra, divi-builder) - Authenticated Stored Cross-Site Scripting (XSS)

Description A privilege escalation vulnerability was discovered that could allow low level users, such as Authors, to use unfiltered HTML inside of post content when using the Divi Builder. Using such code in posts is typically reserved for admins...

WS-2017-3779

In Sakai, versions 12.0 through 12.7 are vulnerable to stored Cross-Site Scripting XSS, due to user input not sanitized in Commons' post content, before rendered by the browser when viewing the post. An attacker could run arbitrary javascript code on other users' browsers...