Lucene search
+L

1071 matches found

attackerkb
attackerkb
added 2023/09/28 3:15 a.m.10 views

CVE-2023-41446

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component...

6.1CVSS6.8AI score0.00584EPSS
SaveExploits1References4
attackerkb
attackerkb
added 2023/09/27 11:15 p.m.8 views

CVE-2023-43233

A stored cross-site scripting XSS vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

6.1CVSS6.5AI score0.00308EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/27 11:15 p.m.14 views

CVE-2023-43233

A stored cross-site scripting XSS vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

6.1CVSS5.9AI score0.00308EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2023/09/27 3:30 p.m.31 views

Subrion CMS Cross-site Scripting vulnerability in /panel/languages

A Cross-site scripting XSS vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter...

5.4CVSS6.2AI score0.00495EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/09/27 3:30 p.m.38 views

GHSA-4W2J-WJ9Q-6WPX Subrion CMS Cross-site Scripting vulnerability in /panel/languages

A Cross-site scripting XSS vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter...

5.4CVSS5.4AI score0.00495EPSS
SaveExploits1References3
attackerkb
attackerkb
added 2023/09/27 3:19 p.m.13 views

CVE-2023-44043

A reflected cross-site scripting XSS vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter...

6.1CVSS6AI score0.00482EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/27 3:19 p.m.24 views

CVE-2023-44043

A reflected cross-site scripting XSS vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter...

6.1CVSS5.9AI score0.00482EPSS
SaveExploits1References1
NVD
NVD
added 2023/09/27 3:19 p.m.24 views

CVE-2023-44043

A reflected cross-site scripting XSS vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter...

6.1CVSS5.9AI score0.00482EPSS
SaveExploits1References1
attackerkb
attackerkb
added 2023/09/27 3:19 p.m.8 views

CVE-2023-43828

A Cross-site scripting XSS vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter...

5.4CVSS6.1AI score0.00495EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/27 3:19 p.m.10 views

CVE-2023-43232

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

5.4CVSS5.9AI score0.00319EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2023/09/27 3:19 p.m.16 views

CVE-2023-43232

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

5.4CVSS6.2AI score0.00319EPSS
SaveExploits0References4
NVD
NVD
added 2023/09/27 3:19 p.m.31 views

CVE-2023-43232

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

5.4CVSS5.3AI score0.00319EPSS
SaveExploits0References2
Prion
Prion
added 2023/09/27 3:19 p.m.27 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

4.9CVSS5.3AI score0.00319EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/27 12:00 a.m.19 views

CVE-2023-43233

A stored cross-site scripting XSS vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

5.6AI score0.00308EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/09/27 12:00 a.m.12 views

PT-2023-28739 · Yzncms · Yzncms

Name of the Vulnerable Software and Affected Versions: YZNCMS version 1.3.0 Description: A stored cross-site scripting XSS issue in the cms/content/edit component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter. This enables...

6.1CVSS6AI score0.00308EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.14 views

Subrion Cross-Site Scripting Vulnerability

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports a variety of extensions plug-ins and more. A cross-site scripting vulnerability exists in Subrion v4.2.1, which originates from a cross-site scripting XSS...

5.4CVSS5.8AI score0.00495EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.15 views

YznCMS Cross-Site Scripting Vulnerability

YznCMS is a backend development framework by Otaku Studio. A cross-site scripting vulnerability exists in YZNCMS v1.3.0, which originates from a stored cross-site scripting XSS vulnerability in the cms/content/edit component that allows an attacker to execute arbitrary web script or HTML by...

6.1CVSS5.5AI score0.00308EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/09/27 12:00 a.m.37 views

CVE-2023-43233

A stored cross-site scripting XSS vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter...

6AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/09/27 12:00 a.m.36 views

CVE-2023-43828

A Cross-site scripting XSS vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter...

5.6AI score0.00495EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/09/27 12:00 a.m.12 views

PT-2023-29004 · Subrion · Subrion

Name of the Vulnerable Software and Affected Versions: Subrion version 4.2.1 Description: A Cross-site scripting XSS issue exists in the /panel/languages/ endpoint, allowing attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Title parameter. This enables...

5.4CVSS5.7AI score0.00495EPSS
SaveExploits1References7
Rows per page
Query Builder