32 matches found
EUVD-2022-50799
Malicious code in bioql PyPI...
EUVD-2022-35480
Malicious code in bioql PyPI...
EUVD-2022-43713
Malicious code in bioql PyPI...
CVE-2022-48085
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter...
CVE-2022-40434
Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page...
CVE-2022-32407
Softr v2.0 was discovered to contain a Cross-Site Scripting XSS vulnerability via the First Name parameter under the Create A New Account module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2022-48085
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter...
CVE-2022-48085
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter...
Design/Logic Flaw
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter...
Softr 跨站脚本漏洞
Softr is a no-code website builder from Softr, Inc. A security vulnerability exists in Softr version v2.0, which stems from the presence of an HTML injection vulnerability via the parameter Work Space Name...
CVE-2022-48085
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter...
CVE-2022-48085
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter...
CVE-2022-48085
CVE-2022-48085 affects Softr v2.0, with a reported HTML injection vulnerability in the Work Space Name parameter. The CVSS 3.1 base score is 5.4 (Medium) with Network attack vector, low attack complexity, privileges required: Low, user interaction required, and impact primarily on confidentiality...
PT-2023-15567
Name of the Vulnerable Software and Affected Versions Softr version 2.0 Description The issue is related to a HTML injection vulnerability. This vulnerability can be exploited via the Work Space Name parameter. Recommendations For Softr version 2.0, consider restricting the use of the Work Space...
CVE-2022-48085: Improper Neutralization of Input During Web Page Generation
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter...
CVE-2022-40434
Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page...
CVE-2022-40434
Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page...
Input validation
Softr v2.0 was discovered to be vulnerable to HTML injection via the Name field of the Account page...
PT-2022-25382 · Softr · Softr
Name of the Vulnerable Software and Affected Versions: Softr version 2.0 Description: The issue is related to HTML injection via the Name field of the Account page. This allows for potential malicious code execution. Recommendations: For Softr version 2.0, consider restricting access to the Accou...