CVE-2024-27558

Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting XSS within the blog title of the settings...

Cross site scripting

Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting XSS within the blog title of the settings...

CVE-2024-24511

Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component...

CVE-2024-27558

Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting XSS within the blog title of the settings...

PT-2024-21944

Name of the Vulnerable Software and Affected Versions Stupid Simple CMS version 1.2.4 Description The issue allows for Cross Site Scripting XSS within the blog title of the settings. Recommendations For Stupid Simple CMS version 1.2.4, update to a version that fixes the Cross Site Scripting issue...

CVE-2024-27558

Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting XSS within the blog title of the settings...

CVE-2024-27558: Improper Neutralization of Input During Web Page Generation

Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting XSS within the blog title of the settings...

PKP OPEN JOURNAL SYSTEMS Cross-Site Scripting Vulnerability

PKP OPEN JOURNAL SYSTEMS PKP OJS is an end-to-end scholarly publishing platform from PKP Inc. A cross-site scripting vulnerability exists in PKP OPEN JOURNAL SYSTEMS v3.4 that originates from a vulnerability that allows an attacker to execute arbitrary code via the Input Title component...

CVE-2024-24511: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component...

CVE-2024-24511

Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component...

CVE-2024-24511

PKP Open Journal Systems (OJS) v.3.4 is affected by a Cross-Site Scripting (XSS) vulnerability located in the Input Title component. This flaw allows an attacker to execute arbitrary code, which is categorized as Improper Neutralization of Input During Web Page Generation (CWE-79). While the prov...

CVE-2024-25292

Cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter...

CVE-2024-25292

Cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter...

RenderTune Security Vulnerability

RenderTune is a free electronic application for Mac/Windows/Linux that uses ffmpeg to combine audio + image files into video files. A security vulnerability exists in RenderTune v1.1.4, which stems from a cross-site scripting XSS vulnerability. An attacker can exploit this vulnerability to execut...

CVE-2024-25292

Cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter...

CVE-2024-25292

Cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter...

CVE-2024-25292: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter...

PT-2024-8848 · Unknown · Rendertune

Name of the Vulnerable Software and Affected Versions: RenderTune version 1.1.4 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs due to inadequate protection of the web page structure when handling the Upload Title parameter. This allows a remote attacker t...

CVE-2024-1919

A vulnerability classified as problematic was found in SourceCodester Online Job Portal 1.0. This vulnerability affects unknown code of the file /Employer/ManageWalkin.php of the component Manage Walkin Page. The manipulation of the argument Job Title leads to cross site scripting. The attack can...

CVE-2024-1323

The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post Type Grid Widget Title in all versions up to, and including, 2.10.30 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...