8156 matches found
CVE-2024-0599: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Jspxcms 10.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file src\main\java\com\jspxcms\core\web\back\InfoController.java of the component Document Management Page. The manipulation of the argument title...
CVE-2022-2413: Improper Neutralization of Input During Web Page Generation
The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting it in the admin pages, allowing a logged in user with roles as low as Author to inject a javascript payload into the slide title even when the unfilteredhtml capability is...
PT-2024-14301
Name of the Vulnerable Software and Affected Versions OFCMS version 1.14 Description A Cross Site Scripting issue allows a remote attacker to obtain sensitive information via a crafted payload to the title addition component. This enables the attacker to execute malicious scripts, potentially...
CVE-2022-4958: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in qkmc-rk redbbs 1.0. Affected is an unknown function of the component Post Handler. The manipulation of the argument title leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the...
PT-2024-11896
Name of the Vulnerable Software and Affected Versions qkmc-rk redbbs version 1.0 Description A problematic vulnerability has been found in the Post Handler component. The manipulation of the title argument leads to cross-site scripting. It is possible to launch the attack remotely. Recommendation...
PHPJabbers Car Park Booking System 3.0 Missing Rate Limiting
Exploit Title: PHPJabbers Car Park Booking System v3.0 - Missing Rate Limiting Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/car-park-booking/sectionDemo Version: v3.0 Tested on:...
qkmc-rk redbbs cross-site scripting vulnerability
qkmc-rk redbbs is an application. A cross-site scripting vulnerability exists in qkmc-rk redbbs version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameter title of the component Post Handler...
CVE-2023-6042
Any unauthenticated user may send e-mail from the site with any title or content to the admin...
CVE-2023-6524
The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the map title parameter in all versions up to and including 2.88.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor...
CVE-2023-6524: Improper Neutralization of Input During Web Page Generation
The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the map title parameter in all versions up to and including 2.88.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor...
RRJ Nueva Ecija Engineer Online Portal Cross-Site Scripting Vulnerability
RRJ Nueva Ecija Engineer Online Portal is an online portal for engineers from RRJ Nueva Ecija. A cross-site scripting vulnerability exists in RRJ Nueva Ecija Engineer Online Portal version 1.0, which stems from the parameter Quiz Title/Quiz Description in the file addquiz.php that causes cross-si...
PT-2024-15374
Name of the Vulnerable Software and Affected Versions RRJ Nueva Ecija Engineer Online Portal version 1.0 Description A vulnerability was found in the RRJ Nueva Ecija Engineer Online Portal, affecting some unknown processing of the file add quiz.php of the component Quiz Handler. The manipulation ...
WP Custom Widget Area <= 1.2.5 - Subscriber+ Menus Creation/Deletion/Update
Description The plugin does not properly apply capability and nonce checks on any of its AJAX action callback functions, which could allow attackers with subscriber+ privilege to create, delete or modify menus on the site. Log in as a subscriber, and paste any of the following fetch call in your...
CVE-2023-6872
Browser tab titles were being leaked by GNOME to system logs. This could potentially expose the browsing habits of users running in a private tab. This vulnerability affects Firefox 121...
CVE-2023-45847
Mattermost fails to to check the length when setting the title in a run checklist in Playbooks, allowing an attacker to send a specially crafted request and crash the Playbooks plugin...
CVE-2023-45847 Playbook Plugin Crash via Run Checklist
Mattermost fails to to check the length when setting the title in a run checklist in Playbooks, allowing an attacker to send a specially crafted request and crash the Playbooks plugin...
CVE-2023-45847
Mattermost fails to to check the length when setting the title in a run checklist in Playbooks, allowing an attacker to send a specially crafted request and crash the Playbooks plugin...
CVE-2023-45847 Playbook Plugin Crash via Run Checklist
Mattermost fails to to check the length when setting the title in a run checklist in Playbooks, allowing an attacker to send a specially crafted request and crash the Playbooks plugin...
PT-2023-29730
Name of the Vulnerable Software and Affected Versions Mattermost affected versions not specified Description The issue arises from Mattermost's failure to check the length when setting the title in a run checklist in Playbooks. This allows an attacker to send a specially crafted request,...
