EUVD-2022-46315

Malicious code in bioql PyPI...

CVE-2025-20328

A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated, remote attacker with low privileges to conduct a cross-site scripting XSS attack against a user of the web-based interface. Cisco has addressed this vulnerability in the Cisco Webex Meetings...

CVE-2025-20328

A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated, remote attacker with low privileges to conduct a cross-site scripting XSS attack against a user of the web-based interface. Cisco has addressed this vulnerability in the Cisco Webex Meetings...

CVE-2025-20328

CVE-2025-20328 affects Cisco Webex Meetings’ user profile component. The issue stems from insufficient validation of user-supplied input, enabling an authenticated, low-privilege attacker to deliver a crafted link that could execute cross-site scripting (XSS) against a targeted user in the web in...

CVE-2025-20328: Improper Neutralization of Input During Web Page Generation

A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated, remote attacker with low privileges to conduct a cross-site scripting XSS attack against a user of the web-based interface. Cisco has addressed this vulnerability in the Cisco Webex Meetings...

CVE-2022-43271

Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting XSS vulnerability via the User profile component...

CVE-2022-43271

Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting XSS vulnerability via the User profile component...

Cross site scripting

Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting XSS vulnerability via the User profile component...

CVE-2022-43271

Inhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site scripting XSS vulnerability via the User profile component...

PT-2021-12652

Name of the Vulnerable Software and Affected Versions: Sage X3 versions prior to Version 12 components shipped with Syracuse 12.10.0 and later Description: The issue allows an authenticated user to inject XSS strings into the First Name, Last Name, and Email Address fields on the 'Edit' page of t...