pv2-victim

pv2-victim authz research - CVE-2026-3306 fix coverage...

CVE-2026-23614: Improper Neutralization of Input During Web Page Generation

GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Sender Policy Framework IP Exceptions interface. An authenticated user can supply HTML/JavaScript in the ctl00$ContentPlaceHolder1$pv2$txtIPDescription parameter to...

CVE-2023-39521: Improper Neutralization of Input During Web Page Generation

Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 14.11.99.28 and Tuleap Enterprise Edition prior to versions 14.10-6 and 14.11-3, content displayed in the "card fields" visible in the kanban and PV2 apps ...

CVE-2023-35929

Tuleap is a free and open source suite to improve management of software development and collaboration. Prior to version 14.10.99.4 of Tuleap Community Edition and prior to versions 14.10-2 and 14.9-5 of Tuleap Enterprise Edition, content displayed in the "card fields" visible in the kanban and P...

CVE-2023-35929: Improper Neutralization of Input During Web Page Generation

Tuleap is a free and open source suite to improve management of software development and collaboration. Prior to version 14.10.99.4 of Tuleap Community Edition and prior to versions 14.10-2 and 14.9-5 of Tuleap Enterprise Edition, content displayed in the "card fields" visible in the kanban and P...

PT-2023-25386 · Unknown · Tuleap Community Edition +1

Name of the Vulnerable Software and Affected Versions: Tuleap Community Edition versions prior to 14.10.99.4 Tuleap Enterprise Edition versions prior to 14.10-2 and 14.9-5 Description: The issue affects the display of content in "card fields" within the kanban and PV2 apps, where the content is n...