CVE-2018-7302

CVE-2018-7302 affects Tiki Wiki CMS Groupware 17.1. The issue arises when a PNG upload is actually SVG content, enabling cross-site scripting (XSS). Data from multiple sources confirms the vulnerability, with the impact described as XSS and the CVSS vectors indicating network attack with low to m...

tak9.com XSS vulnerability

Open Bug Bounty ID: OBB-565125 Description| Value ---|--- Affected Website:| tak9.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7265

Shimmie 2 2.6.0 allows an attacker to upload a crafted SVG file that enables stored XSS...

CVE-2018-7265

Shimmie 2 2.6.0 allows an attacker to upload a crafted SVG file that enables stored XSS...

Cross site scripting

Shimmie 2 2.6.0 allows an attacker to upload a crafted SVG file that enables stored XSS...

CVE-2018-7265

Shimmie 2 2.6.0 is affected by a stored XSS vulnerability triggered by uploading a crafted SVG file. The root cause is improper handling of uploaded SVGs, allowing attacker-supplied JavaScript to be stored and later executed in the victim’s context. Affected component: the image upload handling i...

CVE-2018-7265

Shimmie 2 2.6.0 allows an attacker to upload a crafted SVG file that enables stored XSS...

hockeyeshop.com XSS vulnerability

Open Bug Bounty ID: OBB-564214 Description| Value ---|--- Affected Website:| hockeyeshop.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

unfat.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-563259 Description| Value ---|--- Affected Website:| unfat.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based o...

cinehindi.com XSS vulnerability

Open Bug Bounty ID: OBB-563030 Description| Value ---|--- Affected Website:| cinehindi.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7188

An XSS vulnerability via an SVG image in Tiki before 18 allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with a malicious SVG image, related to lib/filegals/filegallib.php...

Cross site scripting

An XSS vulnerability via an SVG image in Tiki before 18 allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with a malicious SVG image, related to lib/filegals/filegallib.php...

CVE-2018-7188

CVE-2018-7188 describes an XSS vulnerability in Tiki Wiki CMS Groupware prior to version 18. An authenticated user can gain administrator privileges if an administrator opens a wiki page containing a malicious SVG image, related to lib/filegals/filegallib.php. The impact is elevated privileges fo...

el-independiente.com.mx XSS vulnerability

Open Bug Bounty ID: OBB-560892 Description| Value ---|--- Affected Website:| el-independiente.com.mx Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

batik: XML external entity processing vulnerability

An XXE vulnerability was found in Apache Batik which could allow a remote attacker to retrieve the files on the vulnerable server's filesystem by uploading specially crafted SVG images. The vulnerability could also allow a denial of service condition by performing an amplification attack...

bop.gov XSS vulnerability

Open Bug Bounty ID: OBB-559791 Description| Value ---|--- Affected Website:| bop.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

unis.org XSS vulnerability

Open Bug Bounty ID: OBB-559244 Description| Value ---|--- Affected Website:| unis.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

oriver.style XSS vulnerability

Open Bug Bounty ID: OBB-558637 Description| Value ---|--- Affected Website:| oriver.style Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jsfcentral.com XSS vulnerability

Open Bug Bounty ID: OBB-558609 Description| Value ---|--- Affected Website:| jsfcentral.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

weshop.co.id XSS vulnerability

Open Bug Bounty ID: OBB-558333 Description| Value ---|--- Affected Website:| weshop.co.id Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...