PT-2022-28050 · Unknown · Venganzas Del Pasado

Name of the Vulnerable Software and Affected Versions: Venganzas del Pasado affected versions not specified Description: A vulnerability was found in Venganzas del Pasado and classified as problematic. The manipulation of the argument the title leads to cross site scripting. The attack may be...

MyApnea 跨站脚本漏洞

MyApnea is an open source web framework for MyApnea. A cross-site scripting vulnerability exists in MyApnea version 29.0.x. The vulnerability stems from an unknown function in its Title Handler component that allows an attacker to implement cross-site scripting...

CVE-2022-4731: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in myapnea up to 29.0.x. Affected is an unknown function of the component Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 29.1.0 is able to address thi...

Cross-site Scripting (XSS)

collective.contact.widget is vulnerable to cross-site scripting. The vulnerability exists because the title function of widgets.py does not properly escape the title attribute before being rendered, allowing an attacker to inject and execute malicious javascript...

PT-2022-10091

Name of the Vulnerable Software and Affected Versions Activity Watch versions prior to 0.11.0 Description Activity Watch is a free and open-source automated time tracker. The issue allows an attacker to execute arbitrary commands on any macOS machine with ActivityWatch running. This can be...

PYSEC-2022-42988

A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the...

SimpleRisk 跨站脚本漏洞

SimpleRisk is SimpleRisk open source a risk management software. Used to simplify enterprise risk management. A security vulnerability exists in SimpleRisk versions prior to 1.17.3 that originates in the function checkAndSetValidation in the file simplerisk/js/common.js, where manipulation of the...

CVE-2022-4638

A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the...

Collective 跨站脚本漏洞

Collective is an open source Plone plugin shared code base by Collective. A security vulnerability exists in Collective collective.contact.widget 1.12 and earlier versions, which stems from a title function in its src/collective/contact/widget/widgets.py file that allows attackers to implement...

CVE-2022-4596

A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/articles/ of the component Add Blog Post Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...

CVE-2022-4602

A vulnerability was found in Shoplazza LifeStyle 1.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/api/theme-edit/ of the component Review Flow Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...

Shoplazza 安全漏洞

Shoplazza LifeStyle is an e-commerce site from Shoplazza, Inc. A security vulnerability exists in Shoplazza version 1.1 that stems from cross-site scripting due to incorrect manipulation of the parameter Title...

Shoplazza LifeStyle 跨站脚本漏洞

Shoplazza LifeStyle is an e-commerce site from Shoplazza, Inc. A security vulnerability exists in Shoplazza LifeStyle version 1.1, which stems from cross-site scripting due to incorrect manipulation of the parameter Title...

CVE-2022-4596: Improper Neutralization

A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/articles/ of the component Add Blog Post Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...

CVE-2022-4596

Shoplazza 1.1 contains a cross-site scripting vulnerability in the Add Blog Post Handler. The issue arises from manipulating the Title argument for the endpoint /admin/api/admin/articles/, which can be exploited remotely and has public PoC material. Public advisories in multiple sources confirm t...

CVE-2022-4602: Improper Neutralization

A vulnerability was found in Shoplazza LifeStyle 1.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/api/theme-edit/ of the component Review Flow Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...

CVE-2022-4602

CVE-2022-4602 affects Shoplazza LifeStyle 1.1, specifically the Review Flow Handler’s /admin/api/theme-edit/ endpoint. The vulnerability arises from manipulating the Title parameter, enabling cross-site scripting with remote exploitation; the exploit has been disclosed publicly (VDB-216197). Acco...

CVE-2022-40001

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page...

PT-2022-25160 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS version 2.1.1 Description: The issue allows remote attackers to run arbitrary code via the title field of the create article page. This is a Cross Site Scripting XSS issue, which means an attacker can inject malicious scripts into th...

CVE-2022-40001: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in FeehiCMS-2.1.1 allows remote attackers to run arbitrary code via the title field of the create article page...