CVE-2014-9470

Fork CMS prior to 3.8.4 is affected by a cross-site scripting (XSS) vulnerability in the loadForm() function (Frontend/Modules/Search/Actions/Index.php) where the q_widget parameter to /en/search can inject arbitrary script/HTML. The issue arises from insufficient input filtering and is exploitab...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/system.html in Openfiler 2.3 allows remote attackers to inject arbitrary web script or HTML via the device parameter...

Cross site scripting

Cross-site Scripting XSS in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2020-5528

Cross-site scripting vulnerability in Movable Type series Movable Type 7 r.4603 and earlier Movable Type 7, Movable Type 6.5.2 and earlier Movable Type 6.5, Movable Type Advanced 7 r.4603 and earlier Movable Type Advanced 7, Movable Type Advanced 6.5.2 and earlier Movable Type Advanced 6.5, Movab...

PT-2020-7418

Name of the Vulnerable Software and Affected Versions: Cisco Linksys E4200 version 1.0.05 Build 7 Description: The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to Cross-site Scripting XSS attacks. Recommendations: For Cisco Linksys...

CVE-2013-2684: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

A cross-site scripting XSS vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to inject arbitrary web script or HTML via JSON properties available from the REST API...

PT-2020-7636

Name of the Vulnerable Software and Affected Versions infoware MapSuite MapAPI versions 1.0.x through 1.0.35 infoware MapSuite MapAPI versions 1.1.x through 1.1.48 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2843: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5039: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Eucalyptus Management Console EMC 4.0.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PYSEC-2020-212

Multiple cross-site scripting XSS vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML via the 1 @okmessage or 2 @errormessage parameter to issue...

CVE-2013-2294

CVE-2013-2294 concerns ViewGit, with XSS vulnerabilities in the web UI prior to 0.0.7. The issues are triggered when a remote repository user injects malicious data via git branch or tag names, affecting the Shortlog table in templates/shortlog.php and the Heads table in plates/summary.php. The v...

CVE-2014-3718

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/tagm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to inject arbitrary web script or HTML via the 1 find, 2 lib, or 3 sid parameter...

CVE-2013-6451

Cross-site scripting XSS vulnerability in MediaWiki 1.19.9 before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via unspecified CSS values...

CVE-2013-4770: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Eucalyptus Management Console EMC 4.0.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2020-7508

Name of the Vulnerable Software and Affected Versions: Eucalyptus Management Console EMC versions 4.0.0 through 4.0.0 Description: The issue is a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations: Fo...

PT-2020-7289

Name of the Vulnerable Software and Affected Versions: cPanel WebHost Manager WHM version 11.34.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to Cross-site Scripting XSS attacks. Recommendations: For cPanel WebHost Manager WHM version...

Junos OS: Cross-Site Scripting (XSS) in J-Web (JSA10986)

According to its self-reported version number, the remote Juniper Junos device is affected by a cross-site scripting XSS vulnerability in J-Web due to insufficient XSS protection. An unauthenticated, remote attacker can exploit this, via injecting web script or HTML to hijack the target user's...

CVE-2019-20376

A cross-site scripting XSS vulnerability in Electronic Logbook ELOG 3.1.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG document to elogd.c...

Cross site scripting

A cross-site scripting XSS vulnerability in Electronic Logbook ELOG 3.1.4 allows remote attackers to inject arbitrary web script or HTML via the value parameter in a localization loc command to elogd.c...