9612 matches found
PT-2023-33011 · Copyparty · Copyparty
Name of the Vulnerable Software and Affected Versions: copyparty affected versions not specified Description: A reflected cross-site scripting vulnerability exists in the web interface of the application, allowing an attacker to execute malicious javascript code by tricking users into accessing a...
CVE-2023-37164
Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the catid parameter at /shop/?module=shop&action=search...
MobiSystems Office Suite Premium 跨站脚本漏洞
MobiSystems Office Suite Premium is an office software suite from MobiSystems, Inc. A security vulnerability exists in MobiSystems Office Suite Premium version 10.9.1.42602, which stems from a reflected cross-site scripting XSS vulnerability in the parameter filter...
CVE-2023-37164
Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the catid parameter at /shop/?module=shop&action=search...
CVE-2023-38617
Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting XSS vulnerability via the filter parameter at /api?path=files...
PT-2023-25813 · Unknown · Diafan Cms
Name of the Vulnerable Software and Affected Versions: Diafan CMS version 6.0 Description: The issue is related to a reflected cross-site scripting vulnerability. It occurs via the cat id parameter at the "/shop/?module=shop&action=search" API endpoint. Recommendations: For Diafan CMS version 6.0...
Easy Captcha <= 1.0 - Reflected Cross-Site Scripting
Description The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2023-3466
Reflected Cross-Site Scripting XSS...
CVE-2023-3466
CVE-2023-3466 is a reflected Cross-Site Scripting (XSS) vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. According to Citrix CTX561482, affected versions include NetScaler ADC/Gateway 13.1 before 13.1-49.13, 13.0 before 13.0-91.13, 13.1-FIPS before 13.1-37.159, 12.1-FIPS before...
CVE-2023-3466
Reflected Cross-Site Scripting XSS...
Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution Exploit
Exploit Title: Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution Exploit Author: Thurein Soe CVE : CVE-2022-28171 Vendor Homepage: https://www.hikvision.com Software Link: N/A Refence Link: https://cve.report/CVE-2022-28171 Version: Filmora 12: Ds-a71024 Firmware, Ds-a71024...
Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution
Exploit Title: Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Vendor Homepage: https://www.hikvision.com Software Link: N/A Refence Link: https://cve.report/CVE-2022-28171 Version: Filmora 12: Ds-a71024...
CVE-2023-33329
CVE-2023-33329: Authenticated Reflected XSS in Hijiri Custom Post Type Generator plugin
CVE-2023-33329 WordPress Custom Post Type Generator Plugin <= 2.4.2 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Reflected Cross-Site Scripting XSS vulnerability in Hijiri Custom Post Type Generator plugin = 2.4.2 versions...
CVE-2023-36384
CVE-2023-36384 affects the Booking Calendar Contact Form WordPress plugin, vulnerable in versions
CVE-2023-3708
CVE-2023-3708 : Several WordPress themes by DeoThemes are vulnerable to Reflected Cross-Site Scripting via breadcrumbs in multiple versions due to insufficient input sanitization and output escaping. The issue allows unauthenticated attackers to inject arbitrary scripts into pages that may run wh...
Booking Calendar Contact Form < 1.2.41 - Unauthenticated Reflected Cross-Site Scripting
Description Unauth. Reflected Cross-Site Scripting XSS vulnerability in CodePeople Booking Calendar Contact Form plugin = 1.2.40 versions...
CVE-2023-2701 Gravity Forms < 2.7.5 - Reflected XSS
The Gravity Forms WordPress plugin before 2.7.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high-privileged users such as admin...
SUSE CVE-2023-29455
Reflected XSS attacks, also known as non-persistent attacks, occur when a malicious script is reflected off a web application to the victim's browser. The script is activated through a link, which sends a request to a website with a vulnerability that enables execution of malicious scripts...