287 matches found
GHSA-G688-7J3C-H9F3 Known v1.3.1 Cross-site Scripting
A cross-site scripting XSS vulnerability in Known v1.3.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Your Name text field. The researcher report indicates that versions 1.3.1 and prior are vulnerable. Version 1.2.2 is the last...
Cross site scripting
A cross-site scripting XSS vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to execute arbitrary web scripts via a crafted payload injected into the Name text field...
Cross-site Scripting (XSS)
com.jfinal:jfinal is vulnerable to cross-site scriptingXSS attacks. A remote attacker is able to inject and execute arbitrary javascript via a crafted payload injected into the keyword text field under the publish blog module...
GHSA-9PVQ-4CC7-24JG Cross-site Scripting in Jfinal CMS
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...
Design/Logic Flaw
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...
CVE-2022-33113
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...
CVE-2022-33113
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyword text field under the publish blog module...
Jfinal CMS 跨站脚本漏洞
Jfinal CMS is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. Jfinal CMS v5.1.0 version of the cross-site scripting vulnerability , the...
CVE-2022-31303
maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
Cross site scripting
maccms8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
CVE-2022-31303
maccms10 was discovered to contain a stored cross-site scripting XSS vulnerability via the Server Group text field...
CVE-2022-31303
CVE-2022-31303 affects maccms10 and is a stored XSS vulnerability via the Server Group text field. The issue is documented across multiple sources (NVD, Red Hat, CVE lists, CNNVD, etc.) and pertains to stored user input that could be reflected/executed in the CMS. Publicly disclosed details expli...
nopCommerce 跨站脚本漏洞
nopCommerce is an open source general-purpose e-commerce platform. nopCommerce version 4.50.1 is vulnerable to a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied and output data in the "Text" parameter when creating a new post. An attacker...
SuiteCRM Remote Code Execution Vulnerability
SuiteCRM is a customer relationship management system from the Suitecrm team. A remote code execution vulnerability exists in SuiteCRM version v7.11.23, which originates from a failure of a networked system or product to properly filter specific elements of externally entered data during the...
CVE-2022-27474
SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field...
CVE-2022-27474
SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field...
Remote code execution
SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field...
Cross site scripting
AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting XSS vulnerability via viewallcomments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...