8152 matches found
Badaso 跨站脚本漏洞
Badaso is an open source Laravel Vue headless CMS from Uasoft. A security vulnerability exists in Badaso v2.9.7, which originates from the execution of arbitrary web script or HTML via the Title parameter in the Edit Category method...
PT-2023-26712
Name of the Vulnerable Software and Affected Versions Badaso version 2.9.7 Description A stored cross-site scripting XSS issue in the Add Tag function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter. Recommendations For Badaso...
CVE-2023-38974: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...
CVE-2023-40877
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...
CVE-2023-40876
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...
CVE-2023-40877
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...
CVE-2023-40876
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...
Desdev DedeCMS 跨站脚本漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A cross-site scripting vulnerability...
CVE-2023-40877: Improper Neutralization of Input During Web Page Generation
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...
CVE-2023-40876
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...
CVE-2023-40877
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...
PT-2023-27684 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS versions up to and including 5.7.110 Description: A cross-site scripting XSS issue was found in DedeCMS. The issue is located at the "/dede/freelist edit.php" API endpoint via the title parameter. Recommendations: For DedeCMS versions...
CVE-2023-40876
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...
CVE-2023-40876: Improper Neutralization of Input During Web Page Generation
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...
PT-2023-27683
Name of the Vulnerable Software and Affected Versions DedeCMS versions up to and including 5.7.110 Description A cross-site scripting XSS issue was found in DedeCMS. The issue is located at the "/dede/freelist add.php" API endpoint via the title parameter. Recommendations For DedeCMS versions up ...
CVE-2023-40877
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...
BELL-CVE-2023-4128 CVE-2023-4128 does not affect BellSoft software
Bulletin has no description...
CVE-2023-39342
Dangerzone is software for converting potentially dangerous PDFs, office documents, or images to safe PDFs. The Dangerzone CLI "dangerzone-cli" command logs output from the container where the file sanitization takes place, to the user's terminal. Prior to version 0.4.2, if the container is...
