PT-2021-15129

Name of the Vulnerable Software and Affected Versions NetIQ Access Manager versions prior to 5.0.1 NetIQ Access Manager versions prior to 4.5.4 Description The issue is a Reflected Cross Site Scripting XSS vulnerability. This means an attacker can inject malicious scripts into a website, which wi...

CVE-2020-19283

A reflected cross-site scripting XSS vulnerability in the /newVersion component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-19284

A stored cross-site scripting XSS vulnerability in the /group/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the group comments text field...

CVE-2020-19266

A stored cross-site scripting XSS vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-19266

A stored cross-site scripting XSS vulnerability in the index.php/Dswjcms/Site/articleList component of Dswjcms 1.6.4 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-19284: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the /group/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the group comments text field...

CVE-2020-19282: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field...

PT-2021-10330

Name of the Vulnerable Software and Affected Versions: Jeesns version 1.4.2 Description: A stored cross-site scripting XSS issue in the /weibo/comment component allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Weibo comment section. Recommendations: For Jeesn...

Dswjcms Cross-Site Scripting Vulnerability

Dswjcms is for individuals and personal lending launched a free p2p open source project , based on Thinkphp architecture of the industry system , fully automated installation mode , quickly build a P2P website . Dswjcms 1.6.4 version of the existence of cross-site scripting vulnerability , the...

Jeesns Cross-Site Scripting Vulnerabilities

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the editor's source field...

Dswjcms Cross-Site Scripting Vulnerability

Dswjcms is for individuals and personal lending launched a free p2p open source project , based on Thinkphp architecture of the industry system , fully automated installation mode , quickly build a P2P website . Dswjcms 1.6.4 version of the existence of cross-site scripting vulnerability , the...

PT-2021-22163

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 92 Thunderbird versions prior to 91.1 Thunderbird versions prior to 78.14 Firefox ESR versions prior to 78.14 Firefox ESR versions prior to 91.1 Description When delegating navigations to the operating system, Firefox...

Nature Easy Soft Network Technology ZenTao Cross-site Scripting Vulnerability

Nature Easy Soft Network Technology ZenTao is China's easy soft Tianchuang network technology Nature Easy Soft Network Technology company's open source project management software. The software includes features such as product management, project management, quality management and document...

CVE-2020-18126

Multiple stored cross-site scripting XSS vulnerabilities in the Sections module of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML...

Cross-site Scripting (XSS) - Stored in namelessmc/nameless

✍️ Description Stored XSS in google analytics. 🕵️‍♂️ Proof of Concept 1. goto 'http://localhost/Nameless/index.php?route=/panel/core/seo/' logged in as admin. 2. enter "G-XXXXXXXX'; javascript:alert1; alert1; instead will cause any admin who visits the SEO page to have the java script activated on...

Atlassian JIRA < 8.5.14 / 8.6.x < 8.13.6 / 8.14.x < 8.16.1 XSS (JRASERVER-72392)

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is affected by a cross-site scripting vulnerability in the number range searcher component due to improper validation of user-supplied input before returning it to users. An...

PT-2021-21830

Name of the Vulnerable Software and Affected Versions: Aruba AirWave Management Platform versions prior to 8.2.13.0 Description: A remote cross-site scripting XSS vulnerability was discovered in the Aruba AirWave Management Platform. This issue allows for the execution of malicious scripts on the...

PT-2021-10187

Name of the Vulnerable Software and Affected Versions: Hucart CMS version 5.7.4 Description: A Cross Site Scripting XSS issue exists via the mes title field. An attacker can insert a malicious script into the header field of the outbox and send it to other users. When other users open the email,...

PT-2021-10392

Name of the Vulnerable Software and Affected Versions: spring-boot-admin versions prior to the version that fixes the issue, exact version not specified Description: A stored cross-site scripting XSS issue via ResourceController.java in spring-boot-admin allows attackers to execute arbitrary web...

CVE-2021-40089

An issue was discovered in PrimeKey EJBCA before 7.6.0. The General Purpose Custom Publisher, which is normally run to invoke a local script upon a publishing operation, was still able to run if the System Configuration setting Enable External Script Access was disabled. With this setting disable...