290 matches found
CVE-2020-15597
SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field...
Cross site scripting
SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field...
CVE-2020-15597
SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field...
CVE-2020-15597
CVE-2020-15597 affects SOPlanning prior to or at version 1.46.01, where persistent XSS is possible through input fields Project Name, Statutes Comment, Places Comment, or Resources Comment due to insufficient input validation. The vulnerability is described across multiple sources (NVD, Red Hat a...
CVE-2020-15597: Improper Neutralization of Input During Web Page Generation
SOPlanning 1.46.01 allows persistent XSS via the Project Name, Statutes Comment, Places Comment, or Resources Comment field...
SOPlanning Cross-Site Scripting Vulnerability
SOPlanning is an online planning tool for efficiently organizing projects and tasks. A cross-site scripting vulnerability exists in SOPlanning 1.45. An attacker can exploit this vulnerability to execute arbitrary javascript via Name or Comment in status.php...
SOPlanning Cross-Site Scripting Vulnerability (CNVD-2020-13153)
SOPlanning is an online planning tool for efficiently organizing projects and tasks. A cross-site scripting vulnerability exists in SOPlanning 1.45. The vulnerability can be exploited to execute javascript code via the "Your SoPlanning url" field...
CVE-2020-9339
SOPlanning 1.45 allows XSS via the Name or Comment to status.php...
CVE-2020-9339
SOPlanning 1.45 allows XSS via the Name or Comment to status.php...
CVE-2020-9338
SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field...
CVE-2020-9338
SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field...
Cross site scripting
SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field...
Session fixation
SOPlanning 1.45 allows XSS via the Name or Comment to status.php...
CVE-2020-9338
SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field...
CVE-2020-9339
SOPlanning 1.45 allows XSS via the Name or Comment to status.php...
CVE-2020-9338
SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field...
CVE-2020-9338
CVE-2020-9338 affects SoPlanning 1.45, where an XSS flaw exists in the "+Your SoPlanning url+" field. Multiple connected sources confirm a cross-site scripting vulnerability in SoPlanning 1.45, enabling script execution when the vulnerable URL field is manipulated. The Attackerkb entry notes this...
CVE-2020-9339
CVE-2020-9339 affects SOPlanning 1.45. A cross-site scripting (XSS) vulnerability exists in status.php via the Name or Comment fields, allowing injected JavaScript code to be executed. Reports from multiple sources (CNVD, Red Hat, CVE list, CNVD) consistently describe XSS via Name/Comment in stat...