GeoVision GV-VR360 and GV-VD8700 Cameras Cross-site Scripting (CVE-2019-13407)

A XSS found in Advan VD-1 firmware versions up to 230. VD-1 responses a path error message when a requested resource was not found in page cgibin/ssi.cgi. It leads to a reflected XSS because the error message does not escape properly. This plugin only works with Tenable.ot. Please visit...

PT-2024-35258 · Cactusthemes · Cactusthemes Gameplan

Name of the Vulnerable Software and Affected Versions: CactusThemes Gameplan versions 1.5.10 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For...

WordPress DeBounce Email Validator plugin <= 5.6.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian in WordPress Plugin DeBounce Email Validator versions = 5.6.5...

CVE-2024-9615 BulkPress <= 0.3.5 - Reflected Cross-Site Scripting

The BulkPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 0.3.5. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVE-2024-45610 GLPI has a reflected XSS in ajax/cable.php

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Cable form...

CVE-2024-45610 GLPI has a reflected XSS in ajax/cable.php

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Cable form...

CVE-2024-45610

GLPI CVE-2024-45610 describes a reflected XSS in the Cable form that can be exploited by an unauthenticated user. The initial description recommends upgrading to version 10.0.17. Connected sources indicate GLPI versions affected include 9.x through 10.0.18 and third-party advisories/CSAs referenc...

CVE-2024-45609 GLPI has a Reflected XSS in /front/stat.graph.php

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the reports pages...

CVE-2024-45609 GLPI has a Reflected XSS in /front/stat.graph.php

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the reports pages...

CVE-2024-45609

GLPI-CVE-2024-45609 is confirmed in connected sources as a GLPI vulnerability with web-exposed input that can be exploited via XSS in reports. The initial description notes an unauthenticated user can deliver a malicious link to a GLPI technician to trigger a reflected XSS and advises upgrading t...

CVE-2024-45609 GLPI has a Reflected XSS in /front/stat.graph.php

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the reports pages...

CVE-2024-43418 GLPI has multiple reflected XSS

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability. Upgrade to 10.0.17...

CVE-2024-43418 GLPI has multiple reflected XSS

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability. Upgrade to 10.0.17...

CVE-2024-43418

CVE-2024-43418 affects GLPI. An unauthenticated user can send a malicious link to a GLPI technician, enabling a reflected XSS vulnerability. Impact details are not quantified beyond the XSS claim in the provided documents. Remediation stated in the Initial Description: upgrade to GLPI 10.0.17. Th...

CVE-2024-43418 GLPI has multiple reflected XSS

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability. Upgrade to 10.0.17...

CVE-2024-43417 Reflected XSS in Software form

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability located in the Software form. Upgrade to 10.0.17...

CVE-2024-43417

GLPI (Asset and IT Management software) is affected by CVE-2024-43417 due to a reflected XSS in the Software form that can be triggered by an unauthenticated user via a malicious link. The initial description recommends upgrading to version 10.0.17. Connected sources indicate broader SLAs, with s...

CVE-2024-41678 GLPI has multiple reflected XSS

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability. Upgrade to 10.0.17...

CVE-2024-41678 GLPI has multiple reflected XSS

GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI technician in order to exploit a reflected XSS vulnerability. Upgrade to 10.0.17...

CVE-2024-41678

GLPI-CVE-2024-41678: A reflected XSS exists in GLPI that can be triggered by an unauthenticated user sending a malicious link to a GLPI technician. The advisory instructs upgrading to GLPI 10.0.17 or later to mitigate. Impact details in the sources indicate potential confidentiality and integrity...