EventPrime < 3.0.6 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2023-6575 · WordPress · Companion Sitemap Generator

Name of the Vulnerable Software and Affected Versions: Companion Sitemap Generator WordPress plugin versions prior to 4.5.3 Description: The issue is related to the lack of protection of the web page structure, allowing for potential exploitation. Specifically, the plugin does not sanitize and...

PT-2023-25017 · Unknown · I-Doit Open

Name of the Vulnerable Software and Affected Versions: i-doit Open version v24 Description: A reflected cross-site scripting XSS issue was found in i-doit Open via the timeout parameter on the "/login" page. This allows for potential XSS attacks. Recommendations: For i-doit Open version v24,...

CVE-2023-27420 WordPress Arya Multipurpose Theme <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose theme = 1.0.5 versions...

CVE-2023-29322

Adobe Experience Manager versions 6.5.16.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-29302

Adobe Experience Manager versions 6.5.16.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-0010 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal Authentication

A reflected cross-site scripting XSS vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software can allow a JavaScript payload to be executed in the context of an authenticated Captive Portal user’s browser when they click on a specifically crafted link...

PT-2023-3291 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS affected versions not specified Description: A reflected cross-site scripting XSS vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software can allow a JavaScript payload to be executed in the...

Cross site scripting

The Float menu WordPress plugin before 5.0.2, Bubble Menu WordPress plugin before 3.0.4, Button Generator WordPress plugin before 2.3.5, Calculator Builder WordPress plugin before 1.5.1, Counter Box WordPress plugin before 1.2.2, Floating Button WordPress plugin before 5.3.1, Herd Effects WordPre...

CVE-2023-2568

CVE-2023-2568 concerns the WordPress plugin Photo Gallery by Ays . Vulnerable are versions prior to 5.1.7 . The issue arises because the plugin does not escape certain parameters when outputting them in HTML attributes, enabling a Reflected XSS flaw. The documented impact notes that this could be...

CVE-2023-2362 Multiple Plugins from Wow-Company - Reflected XSS

The Float menu WordPress plugin before 5.0.2, Bubble Menu WordPress plugin before 3.0.4, Button Generator WordPress plugin before 2.3.5, Calculator Builder WordPress plugin before 1.5.1, Counter Box WordPress plugin before 1.2.2, Floating Button WordPress plugin before 5.3.1, Herd Effects WordPre...

CVE-2023-2398 Icegram Engage < 3.1.12 - Reflected XSS

The Icegram Engage WordPress plugin before 3.1.12 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-32118

CVE-2023-32118 affects the WPoperation SALERT – Fake Sales Notification WooCommerce plugin, vulnerable in versions

CVE-2023-30753

CVE-2023-30753 affects the WordPress plugin IP Metaboxes by Phan Chuong, with unauthenticated Reflected Cross-Site Scripting (XSS) in versions 2.1.1 to mitigate the vulnerability. The CVE entry is not described as rejected in the provided materials.

CVE-2022-47140

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Repute InfoSystems ARMember plugin = 4.0.1 versions...

CVE-2023-22582

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting...

CVE-2023-22585

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...

CVE-2023-22585

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...

Cross site scripting

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...

CVE-2023-22582

CVE-2023-22582 concerns the Danfoss AK-EM100 web applications and describes a Reflected Cross-Site Scripting (XSS) vulnerability. The CVE entry indicates a network-accessible issue with low to high-severity interpretations across sources, with CVSSv3.1 metrics showing base scores of 6.1 (MEDIUM) ...