1071 matches found
CVE-2023-38973
A stored cross-site scripting XSS vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...
Badaso 跨站脚本漏洞
Badaso is an open source Laravel Vue headless CMS from Uasoft. A security vulnerability exists in Badaso v2.9.7, which originates from the execution of arbitrary web script or HTML via the Title parameter in the Add Tag method...
Badaso 跨站脚本漏洞
Badaso is an open source Laravel Vue headless CMS from Uasoft. A security vulnerability exists in Badaso v2.9.7, which originates from the execution of arbitrary web script or HTML via the Title parameter in the Edit Category method...
CVE-2023-38973
A stored cross-site scripting XSS vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...
CVE-2023-38973
A stored cross-site scripting XSS vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter...
CVE-2023-40876
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...
CVE-2023-40876
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...
CVE-2023-40877
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...
CVE-2023-40877
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...
CVE-2023-40876
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistadd.php via the title parameter...
Desdev DedeCMS 跨站脚本漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A cross-site scripting vulnerability...
PT-2023-27684 · Dedecms · Dedecms
Name of the Vulnerable Software and Affected Versions: DedeCMS versions up to and including 5.7.110 Description: A cross-site scripting XSS issue was found in DedeCMS. The issue is located at the "/dede/freelist edit.php" API endpoint via the title parameter. Recommendations: For DedeCMS versions...
CVE-2023-40877
DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting XSS vulnerability at /dede/freelistedit.php via the title parameter...
SQL injection in jeecg-boot
jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...
CVE-2023-38992
jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...
CVE-2023-38992
jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...
Sql injection
jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...
CVE-2023-38992
jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData...
PT-2023-26721 · Unknown · Jeecg-Boot
Name of the Vulnerable Software and Affected Versions: jeecg-boot version 3.5.1 Description: The issue is a SQL injection vulnerability. It occurs via the title parameter at the "/sys/dict/loadTreeData" API endpoint. Recommendations: For jeecg-boot version 3.5.1, consider restricting access to th...