CVE-2018-7563

An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The...

PT-2018-18158

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.2.2 Description The issue affects the application, allowing for XSS in the query string to "front/preference.php". An attacker can create a malicious URL that, if opened by an authenticated user with debug privilege,...

NetWin SurgeFTP cgi/surgeftpmgr.cgi file cross-site scripting vulnerability

NetWin SurgeFTP is an FTP server from NetWin New Zealand. The server supports platforms such as Windows and Linux and provides SSL/TLS encryption. A cross-site scripting vulnerability exists in the cgi/surgeftpmgr.cgi file Web Manager interface on TCP port 7021 or 9021 in NetWin SurgeFTP version...

Moxa AWK-3131A Web Application Multiple Reflected Cross-Site Scripting Vulnerabilities

Summary An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. Specially crafted input, in multiple parameters, can cause a malicious scripts to be executed by a victim. Tested Versions...

WordPress Plugin WP Live Chat Support Stored Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Software Foundation.Live Chat Support is one of the chat plugins. WordPress plugin WP Live Chat Support has a stored cross-site scripting vulnerability that can be exploited by an attacker to log in as a WordPress user and perform...