223 matches found
CVE-2023-22309
Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4...
CVE-2023-22309
Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4...
CVE-2023-22309 Reflected Cross Site Scripting (XSS)
Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4...
PT-2023-18417 · Tribe29 · Tribe29 Checkmk Appliance
Name of the Vulnerable Software and Affected Versions: Tribe29 Checkmk Appliance versions prior to 1.6.4 Description: The issue is related to Reflective Cross-Site-Scripting in Webconf. Recommendations: For versions prior to 1.6.4, update to version 1.6.4 or later to resolve the issue...
Intranda Goobi Viewer Core 跨站脚本漏洞
Intranda Goobi Viewer Core is a Web-based digital library system from Intranda, Germany. A cross-site scripting vulnerability exists in Intranda Goobi Viewer Core versions prior to 23.03, which stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability. The vulnerability can b...
ARRIS DG3450 跨站脚本漏洞
The ARRIS DG3450 is a cable gateway from ARRIS America. The ARRIS DG3450 Cable Gateway suffers from a cross-site scripting vulnerability that stems from the presence of a reflective cross-site scripting vulnerability, which can be exploited by an attacker to execute arbitrary JavaScript code in t...
B&R Industrial Automation GmbH Runtime 跨站脚本漏洞
B&R Industrial Automation GmbH Runtime is a major component of AS from B&R Industrial Automation GmbH, Austria. A cross-site scripting vulnerability exists in B&R Industrial Automation GmbH Runtime version 3.00 and C4.93, which stems from the presence of a Reflective Cross-Site Scripting XSS...
CVE-2022-48012
Opencats v0.9.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /opencats/index.php?m=settings&a=ajaxtagsupd...
CVE-2022-42360
Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...
WordPress Simple:Press plugin suffers from a reflected cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A reflective cross-site...
CVE-2022-40190
SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting XSS. The web application does not adequately sanitize request strings of malicious JavaScript. An attacker utilizing XSS could then execute malicious code in users’ browsers and steal sensitive...
YORDAM University Library Automation System 跨站脚本漏洞
YORDAM University Library Automation System is a university library automation system from YORDAM. A security vulnerability exists in YORDAM University Library Automation System versions prior to 19.02, which originates from unauthorized reflective cross-site scripting...
Esri ArcGIS Server 跨站脚本漏洞
Esri ArcGIS Server is a web-oriented, enterprise-class software platform for delivering geolocation services from Environmental Systems Research Institute Esri. A cross-site scripting vulnerability exists in Esri ArcGIS Server version 10.9.1 and earlier, which stems from the presence of a...
OpenCATS Cross-Site Scripting Vulnerability (CNVD-2022-70589)
OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.6, which stems from the fact that an attacker can utilize its callback component to implement reflective cross-site scripting. No detailed vulnerability details are available...
Online Examination System 跨站脚本漏洞
Sourcecodester SourceCodester Online Examination System is an online examination system from Sourcecodester, Inc. A cross-site scripting vulnerability exists in version 1.0 of the Online Examination System, which stems from its index.php component that allows an attacker to implement reflective...
Academy Learning Management System Reflective Cross-Site Scripting Vulnerability
Academy Learning Management System is an Academy Learning Management System from the Creativeitem team. The vulnerability is caused by the lack of effective filtering and escaping of user-supplied data in the Search parameter, which could be exploited to launch a reflective cross-site scripting...
WSO2 Enterprise Integrator 跨站脚本漏洞
WSO2 Enterprise Integrator is the United States WSO2 company's set of open source hybrid integration platform. The platform supports communication between multiple applications. A security vulnerability exists in WSO2 Enterprise Integrator version 6.4.0, which stems from reflective cross-site...
Esri Portal For ArcGis 跨站脚本漏洞
Esri Portal For ArcGis is a component of Esri, Inc. that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A security vulnerability exists in Esri Portal For ArcGis versions prior to 10.9.0, which stems from the presence of...
WordPress Popular Posts < 6.0.0 - Reflected Cross-Site Scripting
The plugin does not escape some URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting PoC When the plugin displays a performance notice: https://example.com/wp-admin/plugins.php?"...
