XSS Vulnerability in NiiuShop Single Merchant V4 System

NiiuShop single merchant V4 system is a framework using the new thinkphp6 + event development design + layui + uniapp for the design of open source merchant system. NiiuShop Single Merchant V4 system has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

XSS Vulnerability in ShuipFCMS

ShuipFCMS is a content management system based on ThinkPHP framework as the core and developed in an independent grouping approach. ShuipFCMS suffers from an XSS vulnerability. Attackers can use the vulnerability to obtain sensitive information such as user cookies...

XSS Vulnerability in XYHCMS 3.6

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system. XYHCMS 3.6 has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

XSS vulnerability in ZZCMS sh***.php page

Webmaster Merchants Content Management System ZZCMS, ZZCMS is a PHPASP-based product investment website management system, project investment website management system, enterprise website management system development. An XSS vulnerability exists in the ZZCMS sh.php page. An attacker can exploit...

XSS Vulnerability in UPUPOO of Wuhan Xiaomi Network Technology Co.

UPUPOO is a dynamic video desktop software. Wuhan Xiaomi Network Technology Co., Ltd UPUPOO has an XSS vulnerability that can be exploited by attackers to obtain user cookies...

Anchor CMS 'markdown' cross-site scripting vulnerability

Anchor CMS is a lightweight CMS builder. A cross-site scripting vulnerability exists in Anchor CMS 'markdown', which can be exploited by attackers to obtain sensitive information such as user cookies...

XSS Vulnerability in Autoship System of Zibo Shining Network Technology Co.

Zibo Shining Network Technology Co., Ltd. was established on November 06, 2014 . The company's business scope includes: the development and sale of computer software and hardware, Internet technology development, technical services, network information system integration, web design, network...

Shipping 100 Virtual Goods Auto Shipping System v1.1 build20210104 has XSS vulnerability

Shipping 100-Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. Shipping 100 Virtual Goods Auto Shipping System v1.1 build20210104 has an XSS vulnerability that can be exploited by an attacker to obtain user cookie information...

Heybbs has an XSS vulnerability

Heybbs is a front-end based on bootstrap + js + css, back-end php + mysql development of community programs. Heybbs has an XSS vulnerability. Attackers can use the vulnerability to obtain sensitive information such as user cookies...

Stored XSS Vulnerability in Diyun CMS

DiYunCMS DiYun CMS is a free open source PHP enterprise website management system . A stored XSS vulnerability exists in DiYun CMS. Attackers can use the vulnerability to obtain sensitive information such as user cookies...

XSS Vulnerability in Situ CMS

Situ CMS is the short name of Situ Tourism Website Management System, which is a self-developed website management system applicable to the construction of tourism websites. An XSS vulnerability exists in Situ CMS. An attacker can exploit this vulnerability to obtain sensitive information such as...

XSS Vulnerability in Kaixin Worklog System worklog

Kaixin Worklog Worklog system is a software system based on B/S to build the collaborative office within the enterprise. The system uses ASP.NET language development. Kai star worklog system worklog there are XSS vulnerabilities , attackers can use the vulnerability to obtain sensitive informatio...

XSS Vulnerability in PigX Rapid Development Framework

PigX Rapid Development Framework is based on Spring Security OAuth2 to achieve account password , SMS verification code login , social login , etc., to provide an open platform based on OAuth2 authorization code mode . PigX Rapid Development Framework has an XSS vulnerability. Attackers can use t...

Cross-site scripting vulnerability in simcms (CNVD-2020-70840)

simcms is a solution for used car website based on PHP+MYSQL. A cross-site scripting vulnerability exists in simcms. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

XSS Vulnerability in OFCMS

OFCMS is a java version of the CMS system, based on java technology development of content management system. OFCMS has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

XSS Vulnerability in the Collaborative Journal Acquisition and Editing System of China Academic Journals (CD-ROM Version) Electronic Magazine Agency Ltd.

The collaborative editorial system of periodicals is a comprehensive service platform for the whole process of periodicals collection, editing, reviewing, proofreading and distribution. An XSS vulnerability exists in the collaborative journal collection and editing system of China Academic Journa...

Stored Cross-Site Scripting Vulnerability in Ant Notes

Ant Notes is a cloud notes software, cross-platform, support markdown format, support for web, PC, mobile APP client, and WeChat version, support for generating public blogs and PDF. Ant Notes has a stored cross-site scripting vulnerability. Attackers can use the vulnerability to obtain sensitive...

Victor CMS has a stored XSS vulnerability

Victor CMS is a simple content management system. Victor CMS suffers from a stored XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

Stored Cross-Site Scripting Vulnerability in PHPDisk Web Disk System

PHPDISK network disk system abbreviation: PHPDISK is a set of PHP and MySQL to build a network hard disk file storage management system , can replace the traditional FTP file management . A storage-based cross-site scripting vulnerability exists in the PHPDisk network disk system. An attacker can...

CVE-2020-6876

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...