7605 matches found
EUVD-2020-16261
Cross Site Scripting XSS vulnerability in Aryanic HighMail High CMS versions 2020 and before allows remote attackers to inject arbitrary web script or HTML, via 'user' to LoginForm...
PT-2021-15591
Name of the Vulnerable Software and Affected Versions: McAfee ePolicy Orchestrator ePO versions prior to 5.10 Update 10 Description: The issue allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized...
Aryanic HighMail cross-site scripting vulnerability
Arianik Aryanic HighMail is an application from Arianik Iran. It is used to send and receive e-mail. A security vulnerability exists in Aryanic HighMail versions 2020, which allows remote attackers to inject arbitrary web script or HTML via the "user" to login to the inform...
PT-2021-10379
Name of the Vulnerable Software and Affected Versions: craftcms version 3.1.31 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the "/admin/settings/sites/new" API endpoint. The estimated number of potentially affected devices worldwide i...
Monicahq Monica Stored Cross-Site Scripting (CVE-2021-27370)
A cross-site scripting vulnerability exists in Monicahq Monica. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
CVE-2021-3150: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability on the Delete Personal Data page in Cryptshare Server before 4.8.0 allows an attacker to inject arbitrary web script or HTML via the user name. The issue is fixed with the version 4.8.1...
CVE-2021-27695: Improper Neutralization of Input During Web Page Generation
Multiple stored cross-site scripting XSS vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any "Add" sections, such as Add Card Building & Floor, or others in the Name and Code Parameters...
ImpressCMS Cross-Site Scripting Vulnerability (CNVD-2021-17253)
ImpressCMS is a MySQL-based, modular content management system CMS. The system includes modules for press releases, forums and photo albums. A cross-site scripting vulnerability exists in ImpressCMS profile version 1.4.2, which stems from a Display Name field that is not validly filtered for inpu...
Batflat Cross-Site Scripting Vulnerability
Batflat is a simple, lightweight content management system CMS. A cross-site scripting vulnerability exists in "Navigation" in Batflat 1.3.6, which can be exploited by remote attackers to inject arbitrary web script or HTML via a field name...
Cross site scripting
Cross-site scripting XSS vulnerability in Navigation in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the field name...
CVE-2020-23518: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And CRM Software up to version 3.5 which allows remote attackers to inject arbitrary web script or HTML...
Cross site scripting
Cross Site Scripting XSS vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the lastname parameter...
PT-2021-17393
Name of the Vulnerable Software and Affected Versions Doctor Appointment System version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the comment parameter in the contactus.php file, potentially leading to unauthorized actions on the web application...
Micro Focus Solutions Business Manager – Cross-site Scripting Vulnerabilities
Micro Focus Solutions Business Manager SBM, Serena Business Manager is a suite of business process automation management solutions from Micro Focus UK. The product is mainly used for process automation, including software development lifecycle and IT business process management. A cross-site...
CVE-2020-22839
Reflected cross-site scripting vulnerability XSS in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject arbitrary webscript or HTML code via the tab3 parameter...
Jenzabar 9.2.2 - 'query' Reflected XSS.
Exploit Title: Jenzabar 9.2.2 - 'query' Reflected XSS. Date: 2021–02–06 Exploit Author: y0ungdst Vendor Homepage: https://jenzabar.com Version: Jenzabar — v9.2.0-v9.2.1-v9.2.2 and maybe other versions Tested on: Windows 10 CVE : CVE-2021–26723 -Description: A Reflected Cross-site scripting XSS...
Cross site scripting
Online News Portal using PHP/MySQLi 1.0 is affected by cross-site scripting XSS which allows remote attackers to inject an arbitrary web script or HTML via the "Title" parameter...
CVE-2020-27850: Improper Neutralization of Input During Web Page Generation
A stored Cross-Site Scripting XSS vulnerability in forms import feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via the import of a GF form. This code is interpreted by users in a privileged role Administrator, Editor, etc...
