CVE-2023-33780

A stored cross-site scripting XSS vulnerability in TFDi Design smartCARS 3 v0.7.0 and below allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the body of news article...

CVE-2023-33793

A stored cross-site scripting XSS vulnerability in the Create Power Panels /dcim/power-panels/ function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

CVE-2023-33798

A stored cross-site scripting XSS vulnerability in the Create Rack /dcim/rack/ function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Create Tenants /tenancy/tenants/ function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

NetBox 跨站脚本漏洞

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in NetBox version v3.5.1, which stems from a security issue in the Create Sites /dcim/sites/ feature, and can be...

CVE-2023-33797

A stored cross-site scripting XSS vulnerability in the Create Sites /dcim/sites/ function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

Credence Analytics iDEAL Wealth and Funds SQL注入漏洞

Credence Analytics iDEAL Wealth and Funds is a one-stop solution for funds from Credence Analytics India. A security vulnerability exists in Credence Analytics iDEAL Wealth and Funds version 1.0. An attacker can exploit the vulnerability to inject a payload via the "v" parameter, which can lead t...

Cloudogu SCM Manager 跨站脚本漏洞

Cloudogu SCM Manager is an application from Cloudogu Germany. It provides a fine-grained authorization model that provides users or groups of users with the required permissions, simple configurations. A security vulnerability exists in Cloudogu SCM Manager versions v1.2 through v1.60, which stem...

CVE-2023-33793

A stored cross-site scripting XSS vulnerability in the Create Power Panels /dcim/power-panels/ function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

LavaLite 跨站脚本漏洞

LavaLite is an open source lightweight content management system CMS. A cross-site scripting vulnerability exists in LavaLite version v9.0.0, which stems from the lack of effective filtering and escaping of user-supplied data by the account name, and can be exploited by an attacker to execute...

TotalJS messenger 跨站脚本漏洞

TotalJS messenger is a Node.js open source Slack alternative to the Total.js Platform open source. A security vulnerability exists in TotalJS messenger. An attacker can exploit this vulnerability to execute arbitrary web script or HTML via a specially crafted payload injected into a private task...

DouCo DouPHP 跨站脚本漏洞

DouCo DouPHP is a lightweight enterprise content management system CMS from China's DouShell Network Technology Company. A security vulnerability exists in DouPHP v1.7, which stems from the presence of a stored cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary we...

F5 BIG-IP 跨站脚本漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. F5 BIG-IP suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and...

PT-2023-22642 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.0.3 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters. This enables the execution of malicious scripts,...

DirCMS Cross-Site Scripting Vulnerability

DirCMS is a website builder from the Latvian company DirCMS. A cross-site scripting vulnerability exists in DirCMS version 6.0.0, which stems from the lack of effective filtering and escaping of user-supplied data in the front-end, and can be exploited by an attacker to execute arbitrary Web scri...

zstore 6.6.0 - Cross-Site Scripting (XSS)

Exploit Title: zstore 6.6.0 - Cross-Site Scripting XSS Development: nu11secur1ty Date: 01.29.2023 Vendor: https://zippy.com.ua/ Software: https://github.com/leon-mbs/zstore/releases/tag/6.5.4 Reproduce: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/zippy/zstore-6.5.4...

CVE-2023-27059

A cross-site scripting XSS vulnerability in the Edit Group function of ChurchCRM v4.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Group Name text field...

Online Pizza Ordering System 跨站脚本漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, a personal developer. A security vulnerability exists in Online Pizza Ordering System version 1.0, which originates from a cross-site scripting XSS vulnerability in /php-opos/login.php, which can be exploited by an...

PT-2023-14666 · Artica · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Artica PFMS Pandora FMS version v765 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. A user with edition privileges can create a payload in the reporting...

CVE-2023-24230

A stored cross-site scripting XSS vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page title parameter...