359 matches found
Cross site scripting
The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues...
CVE-2017-18590
The CVE-2017-18590 issue affects the WordPress Timesheet plugin up to version 0.1.5. The connected nuclei template confirms multiple XSS flaws in the Timesheet plugin, with an impact where authenticated attackers can run arbitrary JavaScript in victims’ browsers, potentially compromising sessions...
CVE-2017-18590
The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues...
PT-2019-8521
Name of the Vulnerable Software and Affected Versions WordPress timesheet plugin versions prior to 0.1.5 Description The issue concerns multiple XSS problems. Recommendations For versions prior to 0.1.5, update to version 0.1.5 or later to resolve the issue...
CVE-2017-18590: Improper Neutralization of Input During Web Page Generation
The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues...
Cross-site Scripting (XSS)
kevinpapst/kimai2 is vulnerable to cross-site scripting XSS. It does not escape the timesheet description, allowing an attacker to inject a malicious script via that description...
CVE-2019-15481
Kimai v2 before 1.1 has XSS via a timesheet description...
CVE-2019-15481
Kimai v2 before 1.1 has XSS via a timesheet description...
CVE-2019-15481
Kimai v2 before 1.1 has XSS via a timesheet description...
CVE-2019-15481
Kimai v2 before 1.1 has XSS via a timesheet description...
CVE-2019-15481
Affected product: Kimai v2 prior to 1.1. The vulnerability is an XSS flaw in the timesheet description field, where unescaped user input can be rendered in the UI. Root cause: lack of proper escaping/validation of the timesheet description leading to script injection. Impact: cross-site scripting...
PT-2019-14210
Name of the Vulnerable Software and Affected Versions Kimai v2 version 1.0 Description The issue allows for XSS via a timesheet description. Recommendations For Kimai v2 version 1.0, update to version 1.1 or later to resolve the issue...
CVE-2019-15481: Improper Neutralization of Input During Web Page Generation
Kimai v2 before 1.1 has XSS via a timesheet description...
CVE-2017-18581
The time-sheets plugin before 1.5.0 for WordPress has XSS via the old timesheet list...
CVE-2017-18581
The time-sheets plugin before 1.5.0 for WordPress has XSS via the old timesheet list...
CVE-2017-18581: Improper Neutralization of Input During Web Page Generation
The time-sheets plugin before 1.5.0 for WordPress has XSS via the old timesheet list...
PT-2019-8515
Name of the Vulnerable Software and Affected Versions WordPress time-sheets plugin versions prior to 1.5.0 Description The issue concerns a Cross-Site Scripting XSS problem. It is related to the old timesheet list in the time-sheets plugin for WordPress. Recommendations For versions prior to 1.5....
Kimai 2 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Kimai 2- persistent cross-site scripting XSS Exploit Author: osamaalaa Vendor Homepage: link Software Link: https://github.com/kevinpapst/kimai2 Fixed on Github : https://github.com/kevinpapst/kimai2/pull/962 Version: 2 1-Normal...
Kimai 2 - Persistent Cross-Site Scripting
Kimai 2 - Persistent Cross-Site Scripting Exploit Title: Kimai 2- persistent cross-site scripting XSS Date: 07/15/2019 Exploit Author: osamaalaa Vendor Homepage: link Software Link: https://github.com/kevinpapst/kimai2 Fixed on Github : https://github.com/kevinpapst/kimai2/pull/962 Version: 2...
Kimai 2 - Persistent Cross-Site Scripting
Exploit Title: Kimai 2- persistent cross-site scripting XSS Date: 07/15/2019 Exploit Author: osamaalaa Vendor Homepage: link Software Link: https://github.com/kevinpapst/kimai2 Fixed on Github : https://github.com/kevinpapst/kimai2/pull/962 Version: 2 1-Normal user will try to add timesheet from...