PT-2022-5547 · Кодекс · Кодекс

Name of the Vulnerable Software and Affected Versions: Кодекс affected versions not specified Description: The issue is related to the lack of protection for the web page structure in the Кодекс web client, which can be exploited by a remote attacker to perform cross-site scripting XSS attacks...

The vulnerability of the SafeList.preserveRelativeLinks parameter in the Java library for analyzing, extracting, and managing data in HTML documents (jsoup) allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the SafeList.preserveRelativeLinks parameter in the Java library for analyzing, extracting, and managing data in HTML documents using jsoup is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to...

The vulnerability of the WYSIWYG editor in the Mobiledoc Kit exists due to the lack of measures taken to protect the structure of web pages. This allows attackers to execute XSS attacks.

The vulnerability of the Mobiledoc Kit WYSIWYG editor exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Photonic Plugin lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.

The vulnerability of the Photonic Plugin exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the SAP Enterprise Portal web portal of the SAP NetWeaver integration platform allows a hacker to perform cross-site scripting attacks.

The vulnerability of the SAP Enterprise Portal, a component of the SAP NetWeaver integration platform, is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Jenkins Lucene-Search Plugin, related to the lack of security measures for website structure protection, allows attackers to execute XSS attacks.

The vulnerability of the Jenkins Lucene-Search Plugin exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Jenkins Dynamic Extended Choice Parameter Plugin exists due to the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the Jenkins Dynamic Extended Choice Parameter Plugin exists due to the lack of security measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

The vulnerability of the Jenkins Maven Metadata Plugin, which exists due to the lack of protective measures for website structure, allows attackers to execute XSS attacks.

The vulnerability of the Jenkins Maven Metadata Plugin exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Moodle virtual training environment, which arises due to the lack of measures taken to protect the structure of the web page, allows a hacker to execute arbitrary code and disclose the protected information.

The vulnerability in the Moodle virtual training environment exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and disclose the protected information...

The vulnerability of software for monitoring and managing projects based on RoboHelp’s knowledge base lies in the lack of measures taken to protect the structure of web pages. This allows attackers to gain unauthorized access to protected information.

The vulnerability of software for monitoring and managing projects related to RoboHelp is linked to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Request Tracker system for tracking and monitoring requests at the enterprise level arises from the lack of measures taken to protect the structure of web pages. This vulnerability allows attackers to carry out XSS attacks.

The vulnerability of the Request Tracker system for enterprise-level order tracking and monitoring exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the QTS operating system, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute arbitrary code.

The vulnerability of the QTS operating system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the QTS operating system, related to the lack of measures taken to protect the structure of the web page, allows attackers to execute arbitrary code.

The vulnerability of the QTS operating system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Html::rawElement and Message::text components of the software environment for implementing the hypertext environment of MediaWiki allows a attacker to perform XSS attacks.

The vulnerability of the Html::rawElement and Message::text components of the software environment for implementing the MediaWiki hypertext environment exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry o...

The vulnerability of the Ajax.NET Professional framework exists due to the lack of measures taken to protect the structure of web pages. This vulnerability allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Ajax.NET Professional framework exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Cisco IOX software platform arises from the lack of measures taken to protect the structure of the web page, allowing attackers to enhance their privileges.

The vulnerability of the Cisco IOx software platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the virtual learning environment Moodle, related to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability in the virtual learning environment Moodle is related to the lack of measures taken to protect the structure of the web page when using user identification numbers. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially...

The vulnerability of the social-warfare plugin in the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the social-warfare plugin in the WordPress content management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the web interface of the software tool for creating reports for Cisco Security Manager’s deployed security solutions allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for managing software tools used to create reports for Cisco Security Manager’s deployed security solutions exists due to the lack of protective measures taken for the web page structure. Exploiting this vulnerability allows a malicious actor to perform...

The vulnerability of the CKEditor WYSIWYG editor, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of the CKEditor WYSIWYG editor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to perform XSS attacks remotely...