PT-2023-25208 · Unknown · Simplephpscripts News Script Php Pro

Name of the Vulnerable Software and Affected Versions: SimplePHPscripts News Script PHP Pro version 2.4 Description: A problematic vulnerability has been found in the URL Parameter Handler component of the /preview.php file, leading to cross-site scripting. The attack can be initiated remotely...

CVE-2023-36459

Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 1.3 and prior to versions 3.5.9, 4.0.5, and 4.1.3, an attacker using carefully crafted oEmbed data can bypass the HTML sanitization performed by Mastodon and include arbitrary HTML in oEmbed preview...

PT-2023-7453 · Mastodon · Mastodon

Name of the Vulnerable Software and Affected Versions: Mastodon versions 1.3 through 3.5.8 Mastodon versions 4.0.0 through 4.0.4 Mastodon versions 4.1.0 through 4.1.2 Description: The issue is related to the processing of oEmbed data in Mastodon, which can allow an attacker to bypass HTML...

Mastodon 跨站脚本漏洞

Mastodon is an open source social network server based on ActivityPub. Mastodon suffers from a cross-site scripting vulnerability. An attacker exploits this vulnerability to bypass HTML cleanup and include arbitrary HTML in oEmbed preview cards...

Atlassian Confluence < 7.13.15 / 7.14.x < 7.19.7 / 7.20.x < 8.2.0 (CONFSERVER-82403)

The version of Atlassian Confluence Server running on the remote host is affected by information disclosure vulnerability as referenced in the CONFSERVER-82403 advisory. Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of...

CVE-2023-3475

A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. I...

CVE-2023-3474

A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched...

PT-2023-24995 · Unknown · Simplephpscripts Event Script

Name of the Vulnerable Software and Affected Versions: SimplePHPscripts Event Script version 2.1 Description: A vulnerability was found in the file preview.php of the component URL Parameter Handler, which leads to cross site scripting. The attack may be launched remotely. Recommendations: For...

Vacation Rental Script 1.8 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

SimplePHPscripts GuestBook Script 跨站脚本漏洞

SimplePHPscripts GuestBook Script is a very easy to install, manage and use PHP / MySQL script from SimplePHPscripts Bulgaria. A cross-site scripting vulnerability exists in SimplePHPscripts GuestBook Script version 2.2, which stems from a problem with the file preview.php and can lead to...

SimplePHPscripts Event Script 跨站脚本漏洞

SimplePHPscripts Event Script is a responsive and mobile-friendly web script from Bulgarian company SimplePHPscripts. A cross-site scripting vulnerability exists in SimplePHPscripts Event Script version 2.1, which stems from a problem in the file preview.php that can lead to cross-site scripting...

PT-2023-24993 · Unknown · Simplephpscripts Simple Blog

Name of the Vulnerable Software and Affected Versions: SimplePHPscripts Simple Blog version 3.2 Description: A vulnerability has been found in the file preview.php of the component URL Parameter Handler, which leads to cross site scripting. The attack can be launched remotely. Recommendations: Fo...

PT-2023-25004 · Unknown · Simplephpscripts Guestbook Script

Name of the Vulnerable Software and Affected Versions: SimplePHPscripts GuestBook Script version 2.2 Description: A vulnerability was found in the SimplePHPscripts GuestBook Script, affecting an unknown part of the file preview.php of the component URL Parameter Handler. The manipulation leads to...

PT-2023-24962 · Unknown · Simplephpscripts Classified Ads Script

Name of the Vulnerable Software and Affected Versions: SimplePHPscripts Classified Ads Script version 1.8 Description: A vulnerability was found in the component URL Parameter Handler of the file /preview.php. The manipulation of the argument p leads to cross site scripting. It is possible to...

Denial Of Service (DoS)

github.com/mattermost/mattermost-server is vulnerable to Denial Of Service DoS. The vulnerability exists because the getImagesForPost function of postmetadata.go does not properly validate the links on external websites when constructing a preview for a linked website, allowing an attacker to cau...

CVE-2023-28485

A stored cross-site scripting Stored XSS vulnerability in file preview in WeKan before 6.75 allows remote authenticated users to inject arbitrary web script or HTML via names of file attachments. Any user can obtain the privilege to rename within their own board where they have BoardAdmin access,...

Cross site scripting

A stored cross-site scripting Stored XSS vulnerability in file preview in WeKan before 6.75 allows remote authenticated users to inject arbitrary web script or HTML via names of file attachments. Any user can obtain the privilege to rename within their own board where they have BoardAdmin access,...

Wekan 跨站脚本漏洞

WeKan is a website builder system from the Wekan team that provides the ability to make planning lists and plan time. A security vulnerability exists in WeKan versions prior to 6.75, which stems from a stored cross-site scripting XSS vulnerability in the file preview feature. An attacker could...

CVE-2023-28485

A stored cross-site scripting Stored XSS vulnerability in file preview in WeKan before 6.75 allows remote authenticated users to inject arbitrary web script or HTML via names of file attachments. Any user can obtain the privilege to rename within their own board where they have BoardAdmin access,...

CVE-2023-28485

A stored cross-site scripting Stored XSS vulnerability in file preview in WeKan before 6.75 allows remote authenticated users to inject arbitrary web script or HTML via names of file attachments. Any user can obtain the privilege to rename within their own board where they have BoardAdmin access,...