9213 matches found
CVE-2021-3950
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3950
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3950
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
PYSEC-2021-431
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Google Input 跨站脚本漏洞
Google Input is an input from Google USA. It is used to allow users to easily enter the language of their choice. Google Input suffers from a cross-site scripting vulnerability that stems from the software's lack of filtering and escaping of inappropriate input during web page generation, resulti...
Django-Helpdesk Cross-Site Scripting Vulnerability
Django-Helpdesk is a Django application. A cross-site scripting vulnerability exists in Django-Helpdesk, which stems from a lack of effective filtering and escaping of user input during Web page generation in django-helpdesk. An attacker could exploit this vulnerability to insert malicious code...
CVE-2021-3938
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3945
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
PYSEC-2021-430
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3945
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
FortiPortal - XSS vulnerability
An improper neutralization of input during web page generation vulnerability CWE-79 in FortiPortal GUI may allow a remote and unauthenticated attacker to perform an XSS attack via sending a crafted request with an invalid lang parameter or with an invalid...
GHSA-5JXC-HMQF-3F73 Cross-Site Scripting in grav
grav prior to version 1.7.24 is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3904
grav is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Grav 跨站脚本漏洞
Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms, and one-page product presentations. A cross-site scripting vulnerability exists in grav, which stems from the vulnerability of grav to incorrect input neutralization "cross-site scripting"...
Snipe-IT Cross-Site Scripting Vulnerability (CNVD-2022-19844)
Snipe-IT is an open source IT asset/license management system. Snipe-IT suffers from a cross-site scripting vulnerability that stems from the fact that the program is vulnerable to incorrect input during web page generation, which could be exploited by an attacker to execute arbitrary JavaScript...
GHSA-5RG2-6QR5-2XP8 Cross-site Scripting in snipe-it
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
GHSA-9G3V-J3CR-6FC6 Cross-site Scripting in snipe-it
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-42534
The affected product’s web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the input forms...
