Cross-site Scripting (XSS)

github.com/tus/tusd is vulnerable to cross-site scripting XSS attacks. These attacks are possible because the server will display any files given to it inline. This allows an attacker to upload a malicious SVG and have it execute when the URL is visited...

vacature.com XSS vulnerability

Open Bug Bounty ID: OBB-572868 Description| Value ---|--- Affected Website:| vacature.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

cautareduceri.ro XSS vulnerability

Open Bug Bounty ID: OBB-572598 Description| Value ---|--- Affected Website:| cautareduceri.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cy.iherb.com XSS vulnerability

Open Bug Bounty ID: OBB-570848 Description| Value ---|--- Affected Website:| cy.iherb.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...

GNOME librsvg Input Validation Vulnerability

GNOME librsvg is an open source SVG graphics development library for the GNOME project. GNOME librsvg commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea An input validation vulnerability exists in the rsvg-io.c file in previous versions. A remote attacker can exploit this vulnerability to obtain a...

wyedeantourism.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-568307 Description| Value ---|--- Affected Website:| wyedeantourism.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kindjuice.com XSS vulnerability

Open Bug Bounty ID: OBB-567319 Description| Value ---|--- Affected Website:| kindjuice.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based...

sneakerdistrict.com XSS vulnerability

Open Bug Bounty ID: OBB-566542 Description| Value ---|--- Affected Website:| sneakerdistrict.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gatbik.com XSS vulnerability

Open Bug Bounty ID: OBB-566336 Description| Value ---|--- Affected Website:| gatbik.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

iwonbok.net XSS vulnerability

Open Bug Bounty ID: OBB-566254 Description| Value ---|--- Affected Website:| iwonbok.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

makingno1.com XSS vulnerability

Open Bug Bounty ID: OBB-566243 Description| Value ---|--- Affected Website:| makingno1.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Tiki Wiki CMS Groupware Multiple Vulnerabilities (Feb 2018)

Tiki Wiki CMS Groupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tiki Wiki CMS Groupware XSS Vulnerability

Tiki Wiki CMS Groupware is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

pineiderkorea.com XSS vulnerability

Open Bug Bounty ID: OBB-566157 Description| Value ---|--- Affected Website:| pineiderkorea.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

kebeiqigf.com XSS vulnerability

Open Bug Bounty ID: OBB-565781 Description| Value ---|--- Affected Website:| kebeiqigf.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

humboldtseeds.net XSS vulnerability

Open Bug Bounty ID: OBB-565210 Description| Value ---|--- Affected Website:| humboldtseeds.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7302

Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS...

CVE-2018-7302

Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS...

Cross site scripting

Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS...

CVE-2018-7302

Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS...