PT-2020-16939

Name of the Vulnerable Software and Affected Versions TerraMaster TOS versions 4.2.06 and earlier Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the mod parameter to "/module/index.php" API endpoint. This enables attackers to execute malicious...

CVE-2018-15634

Cross-site scripting XSS issue in attachment management in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim via a crafted link...

PT-2020-8540

Name of the Vulnerable Software and Affected Versions: Odoo Community versions 13.0 and earlier Odoo Enterprise versions 13.0 and earlier Description: The issue allows remote attackers to inject arbitrary web script in the browser of a victim via crafted channel names in the mail module. This is ...

Cross site scripting

A reflected Cross-site scripting XSS vulnerability in Xinuo formerly SCO Openserver version 5 and 6 allows remote attackers to inject arbitrary web script or HTML tag via the parameter 'section'...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admin login webpage with different request parameters, allows remote attackers to inject arbitrary web script or HTML...

KTS Lighthouse Web Interface XSS

The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to inject arbitrary web scripts or HTML code...

CVE-2020-29315

ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML...

CVE-2020-29315

CVE-2020-29315 corresponds to a stored XSS vulnerability in ThinkAdmin (versions v1–v6). The core issue is a stored script/HTML injection that can be executed in the context of the affected web app. Documented references consistently describe ThinkAdmin v1/v6 as vulnerable and note remote attacke...

CVE-2019-16958: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name...

Sonatype Nexus Repository Stored Cross Site Scripting (CVE-2020-10203)

A cross-site scripting vulnerability exists in Sonatype Nexus Repository. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

CVE-2020-7571: Improper Neutralization of Input During Web Page Generation

A CWE-79 Multiple Improper Neutralization of Input During Web Page Generation Cross-site Scripting Reflected vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker to inject arbitrary web script or HTML due to incorrect sanitization of use...

PT-2020-15501

Name of the Vulnerable Software and Affected Versions ljcmsshop version 1.14 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via user.php by registering an account directly in the user center and adding the payload to the delivery addres...

PT-2020-16910

Name of the Vulnerable Software and Affected Versions AudimexEE versions prior to 14.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via 'action, cargo, panel' parameters, potentially leading to data leakage. This occurs when the recommended security...

CVE-2018-8062

A cross-site scripting XSS vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04R02.A2pD035g.d23i firmware allows remote attackers to inject arbitrary web script or HTML via the Service Description parameter while creating a WAN service...

Cross site scripting

A cross-site scripting XSS vulnerability on Comtrend AR-5387un devices with A731-410JAZ-C04R02.A2pD035g.d23i firmware allows remote attackers to inject arbitrary web script or HTML via the Service Description parameter while creating a WAN service...

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to inject arbitrary web script or HTML via multiple parameters through Unicode Transformations Best-fit Mapping, as demonstrated by the full-width variants of the less-than sign...

PT-2020-13758

Name of the Vulnerable Software and Affected Versions Sage EasyPay version 10.7.5.10 Description The issue allows authenticated attackers to inject arbitrary web script or HTML via multiple parameters through Unicode Transformations Best-fit Mapping, as demonstrated by the full-width variants of...

CVE-2020-24188

Cross-site scripting XSS vulnerability in the search functionality in Intrexx before 9.4.0 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the search functionality in Intrexx before 9.4.0 allows remote attackers to inject arbitrary web script or HTML via the request parameter...

CVE-2020-7318: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator ePO prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized...