1072 matches found
PT-2024-18856 · Unknown · Bdtask Isshue Multi Store Ecommerce Shopping Cart Solution
Name of the Vulnerable Software and Affected Versions: Bdtask Isshue Multi Store eCommerce Shopping Cart Solution version 4.0 Description: A problematic issue was found in the Manage Sale Page component, specifically affecting the /dashboard/Cinvoice/manage invoice file. The manipulation of the...
CVE-2024-25292
Cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter...
CVE-2024-25292
Cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter...
RenderTune Security Vulnerability
RenderTune is a free electronic application for Mac/Windows/Linux that uses ffmpeg to combine audio + image files into video files. A security vulnerability exists in RenderTune v1.1.4, which stems from a cross-site scripting XSS vulnerability. An attacker can exploit this vulnerability to execut...
CVE-2024-25292
Cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter...
PT-2024-8848 · Unknown · Rendertune
Name of the Vulnerable Software and Affected Versions: RenderTune version 1.1.4 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs due to inadequate protection of the web page structure when handling the Upload Title parameter. This allows a remote attacker t...
PT-2024-18421 · Unknown · Sourcecodester Online Job Portal
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Job Portal version 1.0 Description: A problematic vulnerability was found in the Manage Walkin Page component, specifically in the file /Employer/ManageWalkin.php. The issue arises from the manipulation of the Job Title...
Online Job Portal 跨站脚本漏洞
Online Job Portal is an online job search portal. A cross-site scripting vulnerability exists in Online Job Portal version 1.0, which stems from the parameter Job Title in the file /Employer/ManageWalkin.php that causes cross-site scripting. No details of the vulnerability are available at this...
CVE-2024-1749
A vulnerability, which was classified as problematic, has been found in Bdtask Bhojon Best Restaurant Management Software 2.9. This issue affects some unknown processing of the file /dashboard/message of the component Message Page. The manipulation of the argument Title leads to cross site...
Bdtask Bhojon Best Restaurant Management Software Cross-Site Scripting Vulnerability
Bdtask Bhojon Best Restaurant Management Software is a restaurant management software from Bdtask Bangladesh. A cross-site scripting vulnerability exists in Bdtask Bhojon Best Restaurant Management Software version 2.9, which stems from unknown handling of /dashboard/message in the component...
liuwy-dlsdys zhglxt Cross-Site Scripting Vulnerability
zhglxt is a web application by the Chinese liuwy-dlsdys individual developer. A cross-site scripting vulnerability exists in liuwy-dlsdys zhglxt version 4.7.7, which stems from the parameter notifyTitle in the file /oa/notify/edit that causes cross-site scripting...
PT-2024-15777 · Unknown · Liuwy-Dlsdys Zhglxt
Name of the Vulnerable Software and Affected Versions: liuwy-dlsdys zhglxt version 4.7.7 Description: A problematic issue has been found in the HTTP POST Request Handler component, affecting the processing of the file /oa/notify/edit. The manipulation of the notifyTitle argument leads to cross-si...
CVE-2023-6524
The MapPress Maps for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the map title parameter in all versions up to and including 2.88.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor...
CVE-2023-48839
Appointment Scheduler 3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...
CVE-2023-48836
Car Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...
CVE-2023-48828
Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the name, pluginsmsapikey, pluginsmscountrycode, calendarid, title, country name, or customername parameter...
CVE-2023-48824
BoidCMS 2.0.1 is vulnerable to Multiple Stored Cross-Site Scripting XSS issues via the title, subtitle, footer, or keywords parameter in a page=create action...
CVE-2023-48172
A Cross Site Scripting XSS vulnerability in Shuttle Booking Software 2.0 allows a remote attacker to inject JavaScript via the name, description, title, or address parameter to index.php...
FormaLMS 跨站脚本漏洞
FormaLMS is an open source learning management system. It is used to build around the specific needs of corporate training. A cross-site scripting vulnerability exists in FormaLMS versions prior to 4.0.5, which stems from the application's lack of effective filtering and escaping of user-supplied...