CVE-2023-25347

A stored cross-site scripting XSS vulnerability in ChurchCRM 4.5.3, allows remote attackers to inject arbitrary web script or HTML via input fields. These input fields are located in the "Title" Input Field in EventEditor.php...

CVE-2023-25347: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in ChurchCRM 4.5.3, allows remote attackers to inject arbitrary web script or HTML via input fields. These input fields are located in the "Title" Input Field in EventEditor.php...

Cross site scripting

When logged in as an admin user, the Title input field under Reports within Untangle NG firewall 14.2.0 is vulnerable to stored XSS...

CVE-2019-18649

When logged in as an admin user, the Title input field under Reports within Untangle NG firewall 14.2.0 is vulnerable to stored XSS...

PT-2019-15552

Name of the Vulnerable Software and Affected Versions Untangle NG Firewall version 14.2.0 Description The issue concerns a stored XSS vulnerability in the Title input field under Reports when an admin user is logged in. Recommendations For Untangle NG Firewall version 14.2.0, update to a version...

CVE-2019-18649: Improper Neutralization of Input During Web Page Generation

When logged in as an admin user, the Title input field under Reports within Untangle NG firewall 14.2.0 is vulnerable to stored XSS...