1319 matches found
CVE-2021-43438
Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...
CVE-2021-43440
Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...
CVE-2021-43441
An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...
CVE-2021-43441
An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...
Cross site scripting
Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...
Cross site scripting
Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...
Design/Logic Flaw
An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...
CVE-2021-43438
Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...
CVE-2021-43438
Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...
CVE-2021-43438
The CVE-2021-43438 entry describes a Stored XSS vulnerability in iResturant 1.0, arising from insufficient input sanitization in the signup/registry form. The attack requires injecting hostile content via the NAME and ADDRESS fields, enabling remote code injection as described in the NVD entry. T...
CVE-2021-43441
An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...
CVE-2021-43441
An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...
CVE-2021-43440
Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...
PT-2021-23844
Name of the Vulnerable Software and Affected Versions iResturant version 1.0 Description The issue allows a remote attacker to inject arbitrary code via the NAME and ADDRESS fields in the signup form, potentially leading to stored XSS attacks. Recommendations For iResturant version 1.0, as a...
CVE-2021-43440: Improper Neutralization of Input During Web Page Generation
Multiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to execute arbitrary code via signup form in the Name and Phone number field...
CVE-2021-43438: Improper Neutralization of Input During Web Page Generation
Stored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via NAME and ADDRESS field...
PT-2021-23846
Name of the Vulnerable Software and Affected Versions iOrder version 1.0 Description The issue allows remote attackers to execute arbitrary code via the signup form in the Name and Phone number fields. This is due to multiple stored XSS vulnerabilities in the source code. Recommendations For iOrd...
PT-2021-23847
Name of the Vulnerable Software and Affected Versions iOrder version 1.0 Description The issue allows a remote attacker to execute malicious HTML codes via the signup form. This can be achieved by injecting malicious HTML into the form, potentially leading to unauthorized actions or data exposure...
CVE-2021-43441: Improper Neutralization of Input During Web Page Generation
An HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious HTML codes via the signup form...
Login/Signup Popup < 2.2 - Reflected Cross-Site Scripting
The plugin does not escape its tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting issue https://example.com/wp-admin/admin.php?page=xoo-el-fields&tab="alert/XSS/...