1213 matches found
Cross-site scripting in Shopizer
A reflected cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL...
ICEcoder 跨站脚本漏洞
ICEcoder is a browser-based code editor that provides a modern approach to building websites. By allowing you to write code directly in your web browser. A security vulnerability exists in ICEcoder 8.0, which has been found to reflect an XSS vulnerability in the multi- results.php page due to...
Cross site scripting
A reflected cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL...
Cross site scripting
Reflected cross-site scripting vulnerability in the admin page of Telop01 free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...
giveasap 跨站脚本漏洞
giveasap is a WordPress plugin A security vulnerability exists in GIVEASAP that stems from the share GET parameter not being sanitized, validated, or escaped, thus leading to reflected XSS...
Multiple cross-site scripting vulnerabilities in multiple PHP Factory products
Overview Multiple products provided by PHP Factory contain multiple cross-site scripting vulnerabilities listed below. Reflected cross-site scripting vulnerability CWE-79 - CVE-2021-20723 Reflected cross-site scripting vulnerability in the admin page CWE-79 - CVE-2021-20724 Reflected cross-site...
Adobe Creative Cloud Desktop Application 跨站脚本漏洞
Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.0.5 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary JavaScript in a browser...
EPrints 跨站脚本漏洞
EPrints is a free open source software package for building open access repositories compliant with the OAI-PMH protocol. A reflected cross-site scripting vulnerability exists in the dataset parameter of the cgi/datasetdictionary URI in EPrints 3.4.2. No detailed vulnerability details are provide...
CVE-2020-35725
Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/index.jsp file via the msg parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
Krpano Panorama Viewer Cross-Site Scripting Vulnerability
krpano Panorama Viewer is a software for viewing panorama files from the German company krpano. The software supports high-resolution images, interactive virtual roaming, custom-designed user interface, and other features. A cross-site scripting vulnerability exists in Krpano Panorama Viewer 1.20...
MikroTik RouterOS Cross-Site Scripting Vulnerability (CNVD-2021-01532)
MikroTik RouterOS is the operating system for the MikroTik RouterBOARD hardware. A reflected cross-site scripting vulnerability exists in the hotspot login page in MikroTik RouterOS 2021-01-04 and earlier. An attacker can exploit this vulnerability via the target parameter to conduct a cross-site...
SAP NetWeaver AS ABAP Cross-Site Scripting Vulnerability (CNVD-2021-03703)
SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP, Germany. A security vulnerability exists in SAP NetWeaver AS ABAP that stems from a failure to adequately encode URLs, allowing an attacker to enter malicious java script in...
Micro Focus Filr Cross-Site Scripting Vulnerability
Micro Focus Filr is a file access and sharing solution for businesses. A reflected cross-site scripting vulnerability exists in Micro Focus Filr 4.2.1. No detailed vulnerability details are provided at this time...
Cross site scripting
Reflected cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script via unspecified vectors...
CVE-2020-28415
A reflected cross-site scripting XSS vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url different vector than CVE-2020-28414...
Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2020-63001)
Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.0 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary JavaScript in a browser...
Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2020-63000)
Adobe Connect is an online video conferencing software. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.0 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary JavaScript in a browser...
HCL Technologies Digital Experience Cross-Site Scripting Vulnerability
HCL Technologies Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL Technologies India. HCL Digital Experience versions 8.5, 9.0, 9.5 have a cross-site scripting vulnerability where a sub-component is susceptible to an XSS attack where in the...
