Social-warfare Plugin XSS

The vulnerability of the social-warfare plugin in the WordPress content management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

GitLab Git Data Compromise

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient filtering of feature flag descriptions. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...

NETGEAR Router Website Structure Data Compromise

The vulnerability of the embedded software of NETGEAR routers such as CBR40, EAX20, EAX80, EX6120, EX6130, EX7500, R7960P, RAX200, RBS40V, RBW30, EX3700, MR60, R8000P, RAX20, RAX45, RAX80, EX3800, MS60, R7900P, RAX15, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852 exists due to...

Microsoft Edge XSS

The vulnerability of Microsoft Edge relates to the lack of measures taken to protect the structure of a web page. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

NETGEAR R7000 Wi-Fi Router XSS

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow attackers to carry out cross-site scripting attacks...

NETGEAR R7000 Wi-Fi Router XSS

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow attackers to carry out cross-site scripting attacks...

PT-2022-1748 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based versions affected versions not specified Description: The issue is related to the browser's failure to properly enforce web page structure protections, potentially allowing a remote attacker to perform cross-site...

Roundcube SMTP Configuration Data Compromise

The vulnerability of the Roundcube email client installer’s SMTP configuration is related to the lack of security measures for the website structure. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...

Calendar Event Multi View Plugin XSS

The vulnerability of the Calendar Event Multi View plugin in the WordPress content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

phpList XSS

The vulnerability of the phpList mailing list management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by creating a new username in the “Login Name” field of the...

Ceph storage system Data Compromise

The vulnerability of the Ceph storage system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...

Sulu CMS XSS

The vulnerability of the Sulu content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

NETGEAR EX7000 Wi-Fi Router XSS

The vulnerability of NETGEAR EX7000, R6250, R6400, R6400v2, and R7100LG Wi-Fi routers stems from the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

MoinMoin SVG Data Compromise

The vulnerability of the SVG file on the wiki platform MoinMoin is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

eDocLib Platform XSS

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser by placing it in the “All Content”...

eDocLib Platform XSS

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect its web page structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the user’s browser by creating a...

Mozilla Firefox XSS

The vulnerability of the Mozilla Firefox browser is related to deficiencies in the security measures used to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Microsoft Dynamics 365 XSS

The vulnerability of the Microsoft Dynamics 365 resource planning software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using specially crafted requests...

Mailman Website Data Compromise

The vulnerability of the Mailman email distribution software is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

Cisco Small Business RV042 XSS

The vulnerability of Cisco Small Business RV042 and RV042G microprogrammed software routers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to perform a cross-site scripting attack remotely...