Lucene search
+L

9213 matches found

NVD
NVD
added 2022/02/09 11:15 p.m.31 views

CVE-2022-22812

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause a web session compromise when an attacker injects and then executes arbitrary malicious JavaScript code inside the target browser. Affected Product: spaceLYnk V2.6.2...

6.1CVSS0.00604EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/09 11:15 p.m.29 views

Cross site scripting

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause a web session compromise when an attacker injects and then executes arbitrary malicious JavaScript code inside the target browser. Affected Product: spaceLYnk V2.6.2...

4.3CVSS6.4AI score0.00604EPSS
SaveExploits0References1Affected Software3
ATTACKERKB
ATTACKERKB
added 2022/01/28 8:15 p.m.9 views

CVE-2021-22822

A CWE-79 Improper Neutralization of Input During Web Page Generation �Cross-site Scripting� vulnerability exists that could allow an attacker to impersonate the user who manages the charging station or carry out actions on their behalf when crafted malicious parameters are submitted to the chargi...

6.1CVSS6.9AI score0.00562EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/28 8:15 p.m.7 views

CVE-2021-22810

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file. Affected Products:...

6.1CVSS5.9AI score0.00749EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/28 8:15 p.m.28 views

Cross site scripting

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file. Affected Products:...

4.3CVSS6.1AI score0.00749EPSS
SaveExploits0References1Affected Software2
OSV
OSV
added 2022/01/21 11:57 p.m.69 views

GHSA-6W5M-JGC5-8CGC orchardcore is vulnerable to Cross-site Scripting

orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS5.3AI score0.00634EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/01/21 11:46 p.m.37 views

icecoder is vulnerable to Cross-site Scripting

icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS5.4AI score0.00668EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
added 2022/01/20 12:00 a.m.25 views

chaskiq Cross-Site Scripting Vulnerability (CNVD-2022-08227)

Chaskiq is an open source messaging platform. It is used for marketing, support and sales. chaskiq suffers from a cross-site scripting vulnerability that stems from the fact that chaskiq is vulnerable to input errors during web page generation "cross-site scripting". An attacker could exploit thi...

7.3CVSS2.6AI score0.006EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/01/19 12:00 a.m.55 views

livehelperchat Cross-Site Scripting Vulnerability (CNVD-2022-08229)

livehelperchat is available via Live Helper Chat, which provides free live support on the website. livehelperchat suffers from a cross-site scripting vulnerability that stems from livehelperchat being vulnerable to incorrect neutralization during page generation. No detailed vulnerability details...

7.1CVSS2AI score0.00813EPSS
SaveExploits1References1
Veracode
Veracode
added 2022/01/18 5:19 a.m.32 views

Cross-site Scripting (XSS)

pimcore/pimcore is vulnerable to cross-site scripting XSS attacks. An attacker is able to bypass the validations due to improper input neutralization during web page generation. The vulnerability can be exploited via changing the rule name in the admin dev page allowing attackers to inject and...

5.4CVSS5.5AI score0.01456EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/01/17 4:15 p.m.13 views

CVE-2022-0257

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.1CVSS6AI score0.01456EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/01/17 4:15 p.m.12 views

CVE-2022-0256

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS5.8AI score0.00642EPSS
SaveExploits1References3
Prion
Prion
added 2022/01/17 4:15 p.m.20 views

Cross site scripting

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

3.5CVSS5.4AI score0.00642EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/01/17 2:15 p.m.13 views

CVE-2022-0253

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.1CVSS6.5AI score0.00813EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/01/17 2:15 p.m.10 views

CVE-2021-3862

icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6AI score0.00668EPSS
SaveExploits1References3
NVD
NVD
added 2022/01/17 12:15 p.m.28 views

CVE-2021-3853

chaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

6.5CVSS0.00616EPSS
SaveExploits1References2
Prion
Prion
added 2022/01/17 12:15 p.m.22 views

Cross site scripting

chaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

3.5CVSS5.4AI score0.006EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2022/01/17 12:00 a.m.39 views

Calibre-Web Cross-Site Scripting Vulnerability (CNVD-2022-21489)

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database.A vulnerability exists in Calibre-Web cross-site scripting that is vulnerable to incorrect neutralization of input during web page generation. No details of the vulnerability are currently...

7.3CVSS1.9AI score0.00809EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/01/17 12:00 a.m.12 views

livehelperchat 跨站脚本漏洞

livehelperchat is available via Live Helper Chat, which provides free live support on the website. livehelperchat suffers from a cross-site scripting vulnerability that stems from livehelperchat being vulnerable to incorrect neutralization during page generation. No detailed vulnerability details...

7.1CVSS5.2AI score0.00813EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/01/17 12:00 a.m.9 views

Chaskiq 跨站脚本漏洞

Chaskiq is an open source messaging platform. It is used for marketing, support and sales. chaskiq suffers from a cross-site scripting vulnerability that stems from the fact that chaskiq is vulnerable to input errors during web page generation "cross-site scripting". An attacker could exploit thi...

7.3CVSS5.4AI score0.006EPSS
SaveExploits1References4
Rows per page
Query Builder