CVE-2024-8586

The CVE-2024-8586 case relates to Uniong WebITR, where an Open Redirect vulnerability could allow an attacker to forge URLs and redirect users to a page of the attacker’s choosing, potentially aiding phishing. Several sources corroborate that WebITR is the affected software and describe input-val...

XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template

Impact Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the restore template to perform a XSS, e.g. by using URL such as: /xwiki/bin/view/XWiki/Main?xpage=restore&showBatch=true&xredirect=javascript:alertdocument.domain This...

PT-2023-4714

Name of the Vulnerable Software and Affected Versions XWiki Platform versions 6.0-rc-1 through 14.10.5 XWiki Platform version 14.10.6 XWiki Platform version 15.1 Description The issue allows users to forge a URL with a payload to inject Javascript in the page, enabling a cross-site scripting XSS...

Mozilla Firefox Injection Vulnerability (CNVD-2020-41073)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 77. An attacker could exploit the vulnerability to forge URLs...