4135 matches found
CVE-2021-46072: Improper Neutralization of Input During Web Page Generation
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel...
PT-2022-12548
Name of the Vulnerable Software and Affected Versions Vehicle Service Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the Service Requests Section in the login panel. This allows for malicious scripts to be stored and executed, potentially affecting...
CVE-2021-46070: Improper Neutralization of Input During Web Page Generation
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the Service Requests Section in login panel...
PT-2022-12552
Name of the Vulnerable Software and Affected Versions Sourcecodester Vehicle Service Management System version 1.0 Description A Stored Cross Site Scripting XSS issue exists via the Settings Section in the login panel. This allows for malicious scripts to be stored and executed, potentially leadi...
CVE-2021-46068: Improper Neutralization of Input During Web Page Generation
A Stored Cross Site Scripting XSS vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel...
PT-2022-9551
Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoices & Packing Slips WordPress plugin versions prior to 2.10.5 Description The issue is related to a Reflected Cross-Site Scripting in the admin dashboard. This occurs because the tab and section parameters are not properly...
PT-2022-9493 · WordPress · Stars Rating Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: The Stars Rating WordPress plugin versions prior to 3.5.1 Description: The issue allows submission of a long integer, causing a Denial of Service in the comments section or pending comment dashboard, depending on whether the user sent it as...
CVE-2021-24893: Uncontrolled Resource Consumption
The Stars Rating WordPress plugin before 3.5.1 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the comments section, or pending comment dashboard depending if the user sent it as unauthenticated or authenticated...
CVE-2021-24991: Improper Neutralization of Input During Web Page Generation
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard...
CVE-2021-25989 ifme - Stored Cross-Site Scripting (XSS) in Groups section
In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability in the markdown editor. It can be exploited by making a victim a Leader of a group which triggers the payload for them...
CVE-2021-25988
In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability notifications section which can be directly triggered by sending an ally request to the admin...
CVE-2021-25988 ifme - Stored Cross-Site Scripting (XSS) in Notifications section
In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability notifications section which can be directly triggered by sending an ally request to the admin...
CVE-2021-25988: Improper Neutralization of Input During Web Page Generation
In “ifme”, versions 1.0.0 to v7.31.4 are vulnerable against stored XSS vulnerability notifications section which can be directly triggered by sending an ally request to the admin...
Exploit for Cross-site Scripting in Vehicle_Service_Management_System_Project Vehicle_Service_Management_System
CVE-2021-46074 Exploit Title: Vehicle Service Management...
Exploit for Cross-site Scripting in Vehicle_Service_Management_System_Project Vehicle_Service_Management_System
CVE-2021-46072 Exploit Title: Vehicle Service Management...
Exploit for Cross-site Scripting in Vehicle_Service_Management_System_Project Vehicle_Service_Management_System
CVE-2021-46071 Exploit Title: Vehicle Service Management...
Exploit for Cross-site Scripting in Vehicle_Service_Management_System_Project Vehicle_Service_Management_System
CVE-2021-46070 Exploit Title: Vehicle Service Management...
Cross-site Scripting (XSS) - Stored in friends-of-forkcms/fork-cms-module-commerce
Description In the admin section in Commerce - Shop settings - Stock statuses - Edit stock statuses one can add XSS payloads. After adding XSS payloads when a user is visiting Commerce - Shop settings - Stock statuses the JavaScript code will be run. Proof of Concept Go to Commerce - Shop setting...