CVE-2021-38339 Simple Matted Thumbnails <= 1.01 Reflected Cross-Site Scripting

The Simple Matted Thumbnails WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /simple-matted-thumbnail.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.01...

CVE-2021-38316

The WP Academic People List WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the categoryname parameter in the /admin-panel.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.4.1...

More From Google <= 0.0.2 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /morefromgoogle.php file which allows attackers to inject arbitrary web scripts...

Cross site scripting

Cross Site Scripting XSS in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Title" field found in the "Add New Forum" page by doing an authenticated POST HTTP request to '/Upload/admin/index.php?module=forum-management&action=add'...

PT-2021-20820

Name of the Vulnerable Software and Affected Versions: DRK Odenwaldkreis Testerfassung version March-2021 Description: The issue allows remote attackers to inject arbitrary web script or HTML via all parameters to HTML form fields in all components. This can be exploited by sending malicious inpu...

CVE-2021-34665 WP SEO Tags <= 2.2.7 Reflected Cross-Site Scripting

The WP SEO Tags WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the saqtxtthefilter parameter in the /wp-seo-tags.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.2.7...

CVE-2018-17865

SAP J2EE Engine 7.01 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary scripts via the wsdlPath parameter to /ctcprotocol/Protocol. The issue affects products that are no longer supported by the maintainer. Several sources corroborate this ...

CVE-2021-35463

The CVE-2021-35463 XSS exists in the Frontend Taglib module of Liferay Portal, affecting 7.4.0 (and 7.4.1 per Red Hat) with remote injection of scripts/HTML into the management toolbar search via the keywords parameter. The issue is caused by an incomplete fix (linked to CVE-2021-35463) and is di...

CVE-2021-33332

Cross-site scripting XSS vulnerability in the Portlet Configuration module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2021-33326

CVE-2021-33326 is an XSS vulnerability in the Frontend JS module of Liferay Portal 7.3.4 and earlier and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20, and 7.2 before fix pack 9. The issue lets remote attackers inject arbitrary script/HTML via the title of a modal window. Affected pr...

Cross site scripting

A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...

CVE-2021-33332: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Portlet Configuration module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2021-35265: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...

PT-2021-20600

Name of the Vulnerable Software and Affected Versions: SEO Backlinks WordPress plugin versions up to and including 4.0.1 Description: The issue allows attackers to inject arbitrary web scripts via Cross-Site Request Forgery, specifically through the loc config function found in the...

CVE-2021-26230: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the user information to saveuser.php...

CASAP Automated Enrollment Cross-site Scripting Vulnerability

CASAP Automated Enrollment is an automated enrollment system for the CASAP organization in the United States. The purpose of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easy to retrieve...

CVE-2021-3279

sz.chat version 4 allows injection of web scripts and HTML in the message box...

PT-2021-19933

Name of the Vulnerable Software and Affected Versions sz.chat version 4 Description The issue allows for the injection of web scripts and HTML in the message box. This can potentially lead to malicious activities such as executing unauthorized code or modifying the webpage's content...

CVE-2021-3279: Improper Neutralization of Input During Web Page Generation

sz.chat version 4 allows injection of web scripts and HTML in the message box...

Cisco Adaptive Security Appliance Cross Site Scripting (CVE-2020-3580)

A cross site scripting vulnerability exists in Cisco Adaptive Security Appliance. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...