13 matches found
CVE-2025-60781
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS in the worksheet.php file via the participantname parameter...
EUVD-2025-35100
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS in the worksheet.php file via the participantname parameter...
CVE-2025-60781
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS in the worksheet.php file via the participantname parameter...
CVE-2025-60781
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS in the worksheet.php file via the participantname parameter...
CVE-2025-60781
PHP Education Manager v1.0 is vulnerable to a Cross-Site Scripting (XSS) vulnerability within the worksheet.php file. The root cause is the insufficient validation of the participant_name parameter, which allows an attacker to inject malicious scripts into the application. Practical consequences ...
CVE-2025-60781
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS in the worksheet.php file via the participantname parameter...
PHP Education Management 安全漏洞
PHP Education Management is an education manager from the individual developer Iqbolshoh Ilhomjonov. A security vulnerability exists in PHP Education Management version 1.0, which stems from an unvalidated parameter participantname in the worksheet.php file and could lead to a cross-site scriptin...
PT-2025-42812
Name of the Vulnerable Software and Affected Versions PHP Education Manager version 1.0 Description The software is susceptible to Cross Site Scripting XSS attacks. The issue is located in the worksheet.php file and involves the participant name parameter. Exploitation of this issue could allow a...
CVE-2025-60781
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting XSS in the worksheet.php file via the participantname parameter...
EUVD-2022-40385
Malicious code in bioql PyPI...
CVE-2022-37775
Genesys PureConnect Interaction Web Tools Chat Service up to at least 26- September- 2019 allows XSS within the Printable Chat History via the participant - name JSON POST parameter...
PT-2022-24065
Name of the Vulnerable Software and Affected Versions Genesys PureConnect Interaction Web Tools Chat Service versions prior to at least 26-September-2019 Description The issue allows XSS within the Printable Chat History via the participant - name JSON POST parameter. This enables potential...
CVE-2022-37775: Improper Neutralization of Input During Web Page Generation
Genesys PureConnect Interaction Web Tools Chat Service up to at least 26- September- 2019 allows XSS within the Printable Chat History via the participant - name JSON POST parameter...