CVE-2021-39199 Cross site scripting via unsafe defaults in remark-html

remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...

CVE-2021-39199: Improper Neutralization of Input During Web Page Generation

remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...

Github remark-html 跨站脚本漏洞

Github remark-html is a remark plugin that serializes Markdown to HTML. remark-html suffers from a cross-site scripting vulnerability that stems from software that does not validate and escape user input. This means that passing arbitrary HTML can lead to potential XSS attacks...

CVE-2020-19204: Improper Neutralization of Input During Web Page Generation

An authenticated Stored Cross-Site Scriptiong XSS vulnerability exists in Lightning Wire Labs IPFire 2.21 x8664 - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. It allows an authenticated WebGUI user to execute Stored Cross-site Scripti...

Lightning Wire Labs IPFire 跨站脚本漏洞

Lightning Wire Labs IPFire is a Linux-based open source firewall from Lightning Wire Labs. It focuses on securing your network while being easy to operate and maintain. It offers many features such as VPN, advanced firewall configuration, and of course great performance in all environments. A...

CVE-2018-16349

WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add formremark parameter...

CVE-2018-16349: Improper Neutralization of Input During Web Page Generation

WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add formremark parameter...

Health Museum built Station system multiple vulnerability and patch-vulnerability warning-the black bar safety net

Today a friend said his little Station old be black,called to help see what the problem is. Found a number of issues as follows: 下载 地址 :http://down.chinaz.com/soft/30318.htm Operating environment: ASP/Access Background directory:admin/login. asp No. 1 to add administrators Vulnerability...

Cross site scripting

Cross-site scripting XSS vulnerability in bulkupdate.pl in AutoNessus before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the remark parameter...

CVE-2008-4520

Cross-site scripting XSS vulnerability in bulkupdate.pl in AutoNessus before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the remark parameter...

CVE-2008-4520: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bulkupdate.pl in AutoNessus before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the remark parameter...