CVE-2020-7937: Improper Neutralization of Input During Web Page Generation

An XSS issue in the title field in Plone 5.0 through 5.2.1 allows users with a certain privilege level to insert JavaScript that will be executed when other users access the site...

CVE-2020-7235

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...

CVE-2020-7235

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...

Design/Logic Flaw

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...

CVE-2020-7235: Improper Neutralization of Input During Web Page Generation

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...

IBM RICOH 6400 Printer - HTML Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: IBM RICOH 6400 Printer - HTML Injection Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ibm.com/il-en Hardware Link:...

CVE-2019-20377

TopList before 2019-09-03 allows XSS via a title...

CVE-2019-20377

TopList before 2019-09-03 allows XSS via a title...

CVE-2019-20377: Improper Neutralization of Input During Web Page Generation

TopList before 2019-09-03 allows XSS via a title...

Video on Admin Dashboard < 1.1.4 - Authenticated Stored XSS

Video on Admin Dashboard is vulnerable to stored XSS. When a user has admin capabilities, malicious code can be submitted through the plugin's options. A user can insert a simple script in the Widget Title text field, e.g. "alert'XSS';. Every specified user role by the plugin will now be targeted...

WordPress FooGallery Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress FooGallery. An attacker can exploit this vulnerability to allow XSS...

CVE-2019-20184

KeePass 2.4.1 allows CSV injection in the title field of a CSV export...

CVE-2019-20182

The FooGallery plugin 1.8.12 for WordPress allow XSS via the posttitle parameter...

CVE-2019-20184

KeePass 2.4.1 allows CSV injection in the title field of a CSV export...

Design/Logic Flaw

KeePass 2.4.1 allows CSV injection in the title field of a CSV export...

CVE-2019-20184

KeePass 2.4.1 allows CSV injection in the title field of a CSV export...

CVE-2019-20184

CVE-2019-20184 affects KeePass 2.4.1 and concerns CSV injection in the title field of a CSV export. The connected documents consistently describe this issue for KeePass 2.4.1, but do not provide specifics on the root cause beyond classifying it as a CSV injection vulnerability, nor details on aff...

CVE-2019-20184

KeePass 2.4.1 allows CSV injection in the title field of a CSV export...

CVE-2019-20184: Improper Neutralization of Formula Elements in a CSV File

KeePass 2.4.1 allows CSV injection in the title field of a CSV export...

KeePass CSV Injection Vulnerability

KeePass is a free open source password manager that helps you manage your passwords in a secure way. A CSV injection vulnerability exists in KeePass 2.4.1 and earlier versions, which can be exploited by an attacker to conduct a CSV injection attack via the title field of a CSV export...