1276 matches found
Cross site scripting
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company/viewbebrowsed/total...
Cross site scripting
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /job...
Cross site scripting
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company/account/safety/trade...
Cross site scripting
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company...
Cross site scripting
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /index/notice/show...
Cross site scripting
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /index/jobfairol/show/...
Cross site scripting
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company/service/increment/add/im...
Cross site scripting
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company/downresume/total/nature...
CVE-2022-32131
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /index/notice/show...
CVE-2022-32131
CVE-2022-32131 affects 74cmsSE v3.5.1 and is a reflected cross-site scripting (XSS) vulnerability exploitable via the /index/notice/show path. The CNA entries describe that lack of proper input validation/output encoding enables attacker-supplied data to execute JavaScript in the victim’s browser...
CVE-2022-32130
CVE-2022-32130 affects 74cmsSE v3.5.1. A reflective XSS flaw exists in the /company/down_resume/total/nature path caused by insufficient input validation/output encoding, allowing injected JavaScript to run in the viewer’s browser. Reported impact includes client-side code execution; CVSS metrics...
CVE-2022-32129
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company/account/safety/trade...
CVE-2022-32129
CVE-2022-32129 affects 74cmsSE v3.5.1 and is a reflective XSS via the path /company/account/safety/trade. The vulnerability stems from inadequate input validation/escaping, allowing injected JavaScript to be executed in the victim’s browser. Impact is client-side script execution; exploitation is...
CVE-2022-32128
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company/service/increment/add/im...
CVE-2022-32126
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /company...
CVE-2022-32127
CVE-2022-32127 affects 74cmsSE v3.5.1 with a reflective XSS via the path /company/view_be_browsed/total. The NVD entry notes a reflective XSS issue (C/L/I A impacts) with base scores: CVSSv2 4.3 (MEDIUM) and CVSSv3.1 6.1 (MEDIUM); exploit status is not described in the provided documents. Related...
CVE-2022-32126
CVE-2022-32126 corresponds to a reflected cross-site scripting (XSS) vulnerability in 74cmsSE v3.5.1, exploitable via the path /company. Multiple connected sources describe that user-supplied data in /company is not properly validated/filtered, allowing injection of JavaScript that would execute ...
CVE-2022-32125
74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /job...
