389 matches found
Jfinal CMS 跨站脚本漏洞
Jfinal CMS is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. Jfinal CMS v5.1.0 version of the cross-site scripting vulnerability , the...
CVE-2022-33113: Improper Neutralization of Input During Web Page Generation
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...
CVE-2022-31303
maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
Cross site scripting
maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
CVE-2022-31303
maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
CVE-2022-31303
CVE-2022-31303 affects maccms10 and is a stored XSS vulnerability via the Server Group text field. The issue is documented across multiple sources (NVD, Red Hat, CVE lists, CNNVD, etc.) and pertains to stored user input that could be reflected/executed in the CMS. Publicly disclosed details expli...
CVE-2022-31302: Improper Neutralization of Input During Web Page Generation
maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
CVE-2022-31303: Improper Neutralization of Input During Web Page Generation
maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
nopCommerce 跨站脚本漏洞
nopCommerce is an open source general-purpose e-commerce platform. nopCommerce version 4.50.1 is vulnerable to a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied and output data in the "Text" parameter when creating a new post. An attacker...
SuiteCRM Remote Code Execution Vulnerability
SuiteCRM is a customer relationship management system from the Suitecrm team. A remote code execution vulnerability exists in SuiteCRM version v7.11.23, which originates from a failure of a networked system or product to properly filter specific elements of externally entered data during the...
CVE-2022-27474
SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field...
Remote code execution
SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field...
CVE-2022-27474
SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field...
CVE-2022-27474: Undefined Security Weakness
SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field...
Cross site scripting
AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting XSS vulnerability via viewallcomments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...
CVE-2022-27063: Improper Neutralization of Input During Web Page Generation
AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting XSS vulnerability via viewallcomments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...
CVE-2022-27436: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in /public/admin/index.php?adduser at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username text field...
CVE-2022-26565: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Totaljs all versions before commit 95f54a5commit, allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Name text field when creating a new page...