88slot-ap (1.0.0), @1nd/documentation (>=11.0.1, <=11.0.2) +551 more potentially affected by CVE-2021-39199 via remark-html (>=2.0.2, <=13.0.1)

remark-html NPM version =2.0.2, =11.0.1, =0.1.0, =1.3.0, =0.0.1, =0.3.0, =0.1.1, =0.1.0, =0.1.0, =0.2.8 and more Source cves: CVE-2021-39199 Source advisory: MEND:CVE-2021-39199...

CVE-2021-39199 Cross site scripting via unsafe defaults in remark-html

remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...

CVE-2021-39199

CVE-2021-39199 concerns the remark-html Node.js library. The root cause is unsafe default behavior: user input could bypass sanitization, allowing arbitrary HTML and potential XSS. The vulnerability is addressed in versions 13.0.2 and 14.0.1 where safe-by-default behavior was implemented, alignin...

CVE-2021-39199

remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...

@hey_joz/gatsby-source-netlify-cms (>=0.0.10, <=0.0.11), @hey_joz/gatsby-theme-netlify-cms (>=0.0.10, <=0.0.11) +1 more potentially affected by CVE-2021-39199 via remark-html (14.0.0)

remark-html NPM version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on remark-html and may be impacted: - @heyjoz/gatsby-source-netlify-cms =0.0.10, =0.0.10, =0.1.0, =0.1.1 Source cves: CVE-2021-39199 Source advisory: MEND:CVE-2021-39199...

CVE-2021-39199: Improper Neutralization of Input During Web Page Generation

remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...

PT-2021-22454

Name of the Vulnerable Software and Affected Versions remark-html versions prior to 13.0.2 remark-html versions prior to 14.0.1 Description The documentation of remark-html mentioned that it was safe by default, but in practice, the default was never safe and had to be opted into. This means user...

Github remark-html 跨站脚本漏洞

Github remark-html is a remark plugin that serializes Markdown to HTML. remark-html suffers from a cross-site scripting vulnerability that stems from software that does not validate and escape user input. This means that passing arbitrary HTML can lead to potential XSS attacks...

Lightning Wire Labs IPFire 跨站脚本漏洞

Lightning Wire Labs IPFire is a Linux-based open source firewall from Lightning Wire Labs. It focuses on securing your network while being easy to operate and maintain. It offers many features such as VPN, advanced firewall configuration, and of course great performance in all environments. A...

PT-2021-10309

Name of the Vulnerable Software and Affected Versions: IPFire version 2.21 x86 64 - Core Update 130 Description: A Stored Cross-Site Scripting XSS issue exists, allowing an authenticated WebGUI user to execute Stored Cross-site Scripting in the Routing Table Entries via the "Remark" text box or...

CVE-2020-19204: Improper Neutralization of Input During Web Page Generation

An authenticated Stored Cross-Site Scriptiong XSS vulnerability exists in Lightning Wire Labs IPFire 2.21 x8664 - Core Update 130 in the "routing.cgi" Routing Table Entries via the "Remark" text box or "remark" parameter. It allows an authenticated WebGUI user to execute Stored Cross-site Scripti...

CVE-2018-16349

WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add formremark parameter...

CVE-2018-16349: Improper Neutralization of Input During Web Page Generation

WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add formremark parameter...

PT-2018-13509

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description The issue is related to a form parameter in a specific page. The remark parameter in the form on the page index.php?m=link&f=index&v=add is vulnerable to XSS attacks. Recommendations For WUZHI CMS version...

Health Museum built Station system multiple vulnerability and patch-vulnerability warning-the black bar safety net

Today a friend said his little Station old be black,called to help see what the problem is. Found a number of issues as follows: 下载 地址 :http://down.chinaz.com/soft/30318.htm Operating environment: ASP/Access Background directory:admin/login. asp No. 1 to add administrators Vulnerability...

Cross site scripting

Cross-site scripting XSS vulnerability in bulkupdate.pl in AutoNessus before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the remark parameter...

CVE-2008-4520

Cross-site scripting XSS vulnerability in bulkupdate.pl in AutoNessus before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the remark parameter...

CVE-2008-4520: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in bulkupdate.pl in AutoNessus before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the remark parameter...