Lucene search
K

14 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-2291

Malware in sbrugna...

6.1CVSS6.1AI score0.00317EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 6:17 p.m.3 views

CVE-2021-20848

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors...

6.1CVSS6.5AI score0.00317EPSS
Exploits0References1
Veracode
Veracode
added 2024/10/01 11:11 a.m.4 views

Cross-site Scripting (XSS)

github.com/schollz/rwtxt is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input validation, allowing a remote attacker to inject arbitrary scripts through unspecified vectors...

6.1CVSS6.5AI score0.00317EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2024/08/21 2:30 p.m.7 views

GO-2022-0231 Cross-site Scripting in github.com/schollz/rwtxt

Cross-site Scripting in github.com/schollz/rwtxt...

6.1CVSS6.1AI score0.00317EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2021/11/29 6:0 p.m.17 views

Cross-site Scripting in github.com/schollz/rwtxt

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors...

6.1CVSS5.2AI score0.00317EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/11/29 6:0 p.m.12 views

GHSA-458F-26R3-X2C3 Cross-site Scripting in github.com/schollz/rwtxt

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors...

6.1CVSS6AI score0.00317EPSS
Exploits0References4
OSV
OSV
added 2021/11/24 4:15 p.m.11 views

CVE-2021-20848

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors...

6.1CVSS6.5AI score
Exploits0References2
NVD
NVD
added 2021/11/24 4:15 p.m.7 views

CVE-2021-20848

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors...

6.1CVSS0.00317EPSS
Exploits0References2
CVE
CVE
added 2021/11/24 8:25 a.m.43 views

CVE-2021-20848

CVE-2021-20848 concerns a cross-site scripting vulnerability in the Go package rwtxt, affecting versions prior to v1.8.6. The issue allows a remote attacker to inject arbitrary script via unspecified vectors, potentially impacting users rendering content processed by rwtxt (notably in environment...

6.1CVSS6AI score0.00317EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/24 8:25 a.m.8 views

CVE-2021-20848

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors...

6.2AI score0.00317EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/11/24 12:0 a.m.2 views

PT-2021-14292 · Rwtxt · Rwtxt

Name of the Vulnerable Software and Affected Versions: rwtxt versions prior to v1.8.6 Description: The issue allows a remote attacker to inject an arbitrary script via unspecified vectors, which can lead to cross-site scripting. Recommendations: For versions prior to v1.8.6, update to version...

6.1CVSS7AI score0.00317EPSS
Exploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/11/16 4:38 a.m.1 views

rwtxt vulnerable to cross-site scripting

Overview rwtxt provided by Zack Scholl is a light-weight content management system CMS that enables to share and/or view any text saved online. rwtxt contains a cross-site scripting vulnerability CWE-79. Ito Reo of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/C...

6.1CVSS5.9AI score0.00317EPSS
Exploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/11/16 12:0 a.m.31 views

JVN#22515597: rwtxt vulnerable to cross-site scripting

rwtxt provided by Zack Scholl is a light-weight content management system CMS that enables to share and/or view any text saved online. rwtxt contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is accessing the website...

6.1CVSS6AI score0.00317EPSS
Exploits0
CNNVD
CNNVD
added 2021/11/16 12:0 a.m.1 views

Zack Scholl rwtxt 跨站脚本漏洞

Rwtxt is a minimalist website for taking notes from Zack's personal developer. Any text saved online can be shared and/or viewed. A cross-site scripting vulnerability exists in Zack Scholl rwtxt v1.8.6 prior to v1.8.6, which stems from insufficient cleaning of user-supplied data. An attacker can...

6.1CVSS6.2AI score0.00317EPSS
Exploits0References5
Rows per page
Query Builder