Lucene search
+L

26 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-34526

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00667EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2023-34528

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00667EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/05/23 3:48 a.m.•21 views

CVE-2023-30096

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user information field...

5.4CVSS5.5AI score0.00667EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:42 a.m.•21 views

CVE-2023-30097

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field...

5.4CVSS5.6AI score0.00667EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:42 a.m.•18 views

CVE-2023-30095

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the channel description field...

5.4CVSS5.6AI score0.00667EPSS
SaveExploits1References1
NVD
NVD
•added 2023/05/04 8:15 p.m.•19 views

CVE-2023-30096

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user information field...

5.4CVSS5.3AI score0.00667EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/04 8:15 p.m.•25 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the channel description field...

4.9CVSS5.2AI score0.00667EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/04 8:15 p.m.•29 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field...

4.9CVSS5.2AI score0.00667EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/05/04 12:00 a.m.•16 views

TotalJS messenger 跨站脚本漏洞

TotalJS messenger is a Node.js open source Slack alternative to the Total.js Platform open source. TotalJS Messenger version b6cf1c9 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML via a crafted payload injected into t...

5.4CVSS5.8AI score0.00667EPSS
SaveExploits1References5
Mend
Mend
•added 2023/05/04 12:00 a.m.•2 views

CVE-2023-30095

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the channel description field...

5.4CVSS0.00667EPSS
SaveExploits1References4
Mend
Mend
•added 2023/05/04 12:00 a.m.•2 views

CVE-2023-30096

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user information field...

5.4CVSS0.00667EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2023/05/04 12:00 a.m.•15 views

CVE-2023-30096

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user information field...

5.3AI score0.00667EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/05/04 12:00 a.m.•11 views

CVE-2023-30095

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the channel description field...

5.3AI score0.00667EPSS
SaveExploits1References3
CVE
CVE
•added 2023/05/04 12:00 a.m.•72 views

CVE-2023-30095

CVE-2023-30095 affects TotalJS Messenger (commit b6cf1c9). It describes a stored XSS vulnerability in the channel description field, allowing an attacker to execute arbitrary web scripts or HTML in the context of the affected app. The vulnerability is evidenced across multiple sources, including ...

5.4CVSS5.2AI score0.00667EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/05/04 12:00 a.m.•33 views

CVE-2023-30096

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user information field...

5.5AI score0.00667EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/04 12:00 a.m.•6 views

CVE-2023-30097: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field...

5.4CVSS6.1AI score0.00667EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/05/04 12:00 a.m.•18 views

PT-2023-22539 · Unknown · Totaljs Messenger

Name of the Vulnerable Software and Affected Versions: TotalJS messenger affected versions not specified Description: A stored cross-site scripting XSS vulnerability in TotalJS messenger allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task...

5.4CVSS5.3AI score0.00667EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2023/05/04 12:00 a.m.•48 views

CVE-2023-30097

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field...

5.4AI score0.00667EPSS
SaveExploits1References3
Mend
Mend
•added 2023/05/04 12:00 a.m.•4 views

CVE-2023-30097

A stored cross-site scripting XSS vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field...

5.4CVSS0.00667EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/05/04 12:00 a.m.•17 views

TotalJS messenger 跨站脚本漏洞

TotalJS messenger is a Node.js open source Slack alternative to the Total.js Platform open source. A cross-site scripting vulnerability exists in TotalJS Messenger version b6cf1c9, which can be exploited by an attacker to execute arbitrary web script or HTML via a crafted payload injected into a...

5.4CVSS5.7AI score0.00667EPSS
SaveExploits1References5
Rows per page
Query Builder