Lucene search
+L

1204 matches found

Prion
Prion
added 2023/04/14 2:15 a.m.15 views

Cross site scripting

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php...

5.8CVSS6.2AI score0.0125EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/14 12:0 a.m.11 views

CVE-2023-29623

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php...

6.2AI score0.0125EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/03/28 7:15 a.m.12 views

CVE-2022-45831 WordPress Image Hover Effects - Caption Hover with Carousel Plugin <= 2.8 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in biplob018 Image Hover Effects for Elementor with Lightbox and Flipbox plugin = 2.8 versions...

7.1CVSS5.9AI score0.00408EPSS
SaveExploits0References1
0day.today
0day.today
added 2023/03/27 12:0 a.m.200 views

Canteen Management v1.0 - XSS Reflected Vulnerability

Exploit Title: Canteen-Management v1.0 - XSS-Reflected Exploit Author: nu11secur1ty Vendor: Free PHP Projects & Ideas with Source Codes for Students | mayurik Software: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/mayurik/2022/Canteen-Management/Docs Reference:...

6.8AI score
SaveExploits0
Prion
Prion
added 2023/03/22 9:15 p.m.16 views

Cross site scripting

The Woo Bulk Price Update WordPress plugin, in versions 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'page' parameter to the technogetproducts action, which can only be triggered by an authenticated user...

4.9CVSS5AI score0.00887EPSS
SaveExploits2References1Affected Software1
OSV
OSV
added 2023/03/22 5:15 p.m.7 views

CVE-2023-21615

Experience Manager versions 6.5.15.0 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

5.4CVSS6AI score0.0048EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/20 12:15 p.m.6 views

CVE-2023-22682

Reflected Cross-Site Scripting XSS vulnerability in Manuel Masia | Pixedelic.Com Camera slideshow plugin = 1.4.0.1 versions...

6.1CVSS5.8AI score0.00406EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/03/20 12:0 a.m.4 views

WordPress plugin Map Multi Marker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.9AI score0.00406EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/19 12:0 a.m.30 views

imgproxy 跨站脚本漏洞

imgproxy is imgproxy individual developer's fast and secure standalone server for tweaking and converting remote mirrors. A cross-site scripting vulnerability exists in imgproxy versions prior to 3.14.0, which stems from the presence of reflected cross-site scripting XSS...

6.5CVSS5.8AI score0.01585EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/03/16 12:0 a.m.11 views

CVE-2023-1429 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19...

4CVSS5.3AI score0.00403EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/03/10 12:0 a.m.5 views

Pimcore 跨站脚本漏洞

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce framework and product information management applications. A cross-site scripting vulnerability exists in...

5.2CVSS5AI score0.00415EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/03/10 12:0 a.m.5 views

Enhancesoft osTicket 跨站脚本漏洞

Enhancesoft osTicket is an open source ticketing system from Enhancesoft, Inc. in the United States. A cross-site scripting vulnerability exists in versions prior to Enhancesoft osTicket v1.16.6, which stems from the presence of a Reflected Cross-Site Scripting XSS vulnerability...

5.4CVSS5.3AI score0.01059EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2023/03/08 12:0 a.m.7 views

CVE-2023-24657

phpipam v1.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the closeClass parameter at /subnet-masks/popup.php...

6.3AI score0.03904EPSS
SaveExploits3References1
Prion
Prion
added 2023/03/06 9:15 p.m.17 views

Cross site scripting

PMB v7.4.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the query parameter at /admin/convert/exportz3950.php...

5.8CVSS6AI score0.01169EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/06 12:0 a.m.6 views

PT-2023-19761 · Pmb · Pmb

Name of the Vulnerable Software and Affected Versions: PMB version 7.4.6 Description: A reflected cross-site scripting XSS issue was found in PMB via the query parameter at "/admin/convert/export z3950.php". This allows for potential malicious script execution. Recommendations: For PMB version...

6.1CVSS6.1AI score0.01169EPSS
SaveExploits1References4
PyPA
PyPA
added 2023/02/22 9:15 a.m.6 views

PYSEC-2023-33

Cross-site Scripting XSS - Reflected in GitHub repository modoboa/modoboa prior to 2.0.5...

4.8CVSS6.2AI score0.00494EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2023/02/21 12:0 a.m.8 views

AXIS 207W 跨站脚本漏洞

The AXIS 207W is a web camera from AXIS Sweden. The AXIS 207W network camera suffers from a cross-site scripting vulnerability that originates from a Reflected Cross-Site Scripting XSS vulnerability in the Web Management Portal, which can be exploited by a remote attacker to execute arbitrary...

6.1CVSS6.4AI score0.00473EPSS
SaveExploits1References2
Prion
Prion
added 2023/02/14 3:15 p.m.16 views

Cross site scripting

A reflected cross-site scripting XSS vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions =3.00 and =C4.93 that enables a remote attacker to execute arbitrary JavaScript in the context of the users browser session...

5.8CVSS5.9AI score0.00564EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/02/13 12:0 a.m.6 views

Slims9 Bulian 跨站脚本漏洞

Slims9 Bulian is a free and open source software from the Indonesian Slims community. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A security vulnerability exists in Slims9 Bulian version v9.5.2, which stems from a...

6.1CVSS6.2AI score0.00473EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/02/01 12:0 a.m.4 views

CVE-2023-0606 Cross-site Scripting (XSS) - Reflected in ampache/ampache

Cross-site Scripting XSS - Reflected in GitHub repository ampache/ampache prior to 5.5.7...

9.3CVSS6.1AI score0.00639EPSS
SaveExploits1References2
Rows per page
Query Builder