9297 matches found
CVE-2020-23341
A reflected cross site scripting XSS vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
PT-2021-22285
Name of the Vulnerable Software and Affected Versions Hospital Management System affected versions not specified Description The issue is related to a persistent cross-site scripting XSS in the Hospital Management System, specifically targeted towards web admin through the prescribe.php endpoint...
Pepperminty Wiki Cross-Site Scripting Vulnerability
Pepperminty Wiki is an open source complete wiki engine contained in a single file. Pepperminty Wiki suffers from a cross-site scripting vulnerability that stems from insufficient cleaning of user-supplied data in the Wiki Name field. An attacker can exploit this vulnerability to inject and execu...
PaperCut MF/NG Scripting
The vulnerability of the printing control software in PaperCut MF and PaperCut NG exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to implement a malicious script through the user interface...
Cross site scripting
A cross site scripting XSS vulnerability in the /segments/edit.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter...
CVE-2020-20990
CVE-2020-20990 is a cross-site scripting (XSS) vulnerability in Domainmod 4.13 that affects the /segments/edit.php Segment Name parameter. The underlying issue is lack of proper validation of user-supplied data, allowing attackers to inject arbitrary web scripts or HTML. The affected component is...
CVE-2020-20977
A stored cross site scripting XSS vulnerability in index.php/legend/6.html of UK CMS v1.1.10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Comments section...
PT-2021-10570
Name of the Vulnerable Software and Affected Versions: Domainmod version 4.13 Description: A cross-site scripting XSS issue in the /segments/edit.php component allows attackers to execute arbitrary web scripts or HTML via the Segment Name parameter. This enables attackers to potentially manipulat...
EyouCms Cross-Site Scripting Vulnerability
EyouCms EyouCms is a ThinkPHP-based open source content management system CMS from Hainan Zanzan Network Technology Co. An attacker can use the vulnerability to execute arbitrary web scripts or HTML...
CVE-2020-21362
A cross site scripting XSS vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter...
Maccms cross-site scripting vulnerabilities
Maccms 10 is a PHP-based film and television content management system CMS. Maccms 10 is vulnerable to a cross-site scripting vulnerability, which originates from the ""wd"" parameter in the software's background search function that is not effectively restricted and checked, and can be exploited...
WordPress Plugin "Quiz And Survey Master" vulnerable to cross-site scripting
Overview WordPress Plugin "Quiz And Survey Master" provided by ExpressTech contains a cross-site scripting vulnerability CWE-79 due to the flow in handling some URL query parameters. Gen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to the developer and coordinated on...
Eyoucms Cross-Site Scripting Vulnerability
Zanzan Network Technology EyouCms EyouCms is a ThinkPHP-based open source content management system CMS from Zanzan Network Technology in China. version v1.4.1 of Eyoucms has a security vulnerability. An attacker can use the vulnerability to execute arbitrary web scripts or HTML...
Rust cross-site scripting vulnerabilities
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A cross-site scripting vulnerability exists in comrak crate in versions of Mozilla Rust prior to 0.10.1, which could be exploited by an attacker to execute the script in a Web browser in the secure context of a...
PT-2021-21890
Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: A reflected cross-site scripting issue affects OAuth-enabled instances. This could potentially allow for malicious script execution. No information is provided about the estimated number...
PT-2021-20113
Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.1.0 through 7.3.2 Liferay DXP versions 7.1 before fix pack 19 Liferay DXP versions 7.2 before fix pack 7 Description A cross-site scripting XSS issue in the Portlet Configuration module allows remote attackers to inje...
PT-2021-20869
Name of the Vulnerable Software and Affected Versions: MaxSite CMS versions prior to V106 Description: A reflected cross-site scripting XSS issue allows remote attackers to inject arbitrary web script to a page via the "product/page/" API endpoint. This enables attackers to execute malicious...
Cybozu Garoon Cross-Site Scripting Vulnerability
Cybozu Garoon is a portal-based OA office system from Cybozu Japan. A cross-site scripting vulnerability exists in some of the email functions in Cybozu Garoon. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...
Cybozu Garoon Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability exists in Bulletin in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to execute arbitrary scripts on a logged-in user's Web browser...
