CVE-2019-13488

A cross-site scripting XSS vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend method is used...

Cross-Site Scripting (XSS)

GROWI are vulnerable to cross-site scripting attacks. A remote, authenticated attacker could exploit the flawed New Page Handler component to inject and execute arbitrary web script or HTML into victim's browser...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2019-22260)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

CVE-2019-5970

The CVE-2019-5970 entry applies to WordPress Plugin Attendance Manager (versions ≤ 0.5.6). The vulnerability is a Self-reported Stored Cross-Site Scripting (CWE-79) in which an attacker can inject arbitrary script/HTML via unspecified vectors, potentially executing code in the administrator’s bro...

CVE-2019-5967: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Joruri CMS 2017 Release2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-14864

Incorrect access control in asset bundles in Odoo Community 9.0 through 11.0 and earlier and Odoo Enterprise 9.0 through 11.0 and earlier allows remote authenticated users to inject arbitrary web script via a crafted attachment...

CVE-2016-5236: Improper Neutralization of Input During Web Page Generation

Cross-Site-Scripting XSS vulnerabilities in F5 WebSafe Dashboard 3.9.5 and earlier, aka F5 WebSafe Alert Server, allow privileged authenticated users to inject arbitrary web script or HTML when creating a new user, account or signature...

CVE-2018-18875

In firmware version MS2.6.9900 of Columbia Weather MicroServer, a stored Cross-site scripting XSS vulnerability allows remote authenticated users to inject arbitrary web script via changestationname.php...

CVE-2018-18875

In firmware version MS2.6.9900 of Columbia Weather MicroServer, a stored Cross-site scripting XSS vulnerability allows remote authenticated users to inject arbitrary web script via changestationname.php...

PT-2019-9654

Name of the Vulnerable Software and Affected Versions Columbia Weather MicroServer version MS 2.6.9900 Description A stored Cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script via the "changestationname.php" endpoint. Recommendations For version MS...

CVE-2018-8047: Improper Neutralization of Input During Web Page Generation

vtiger CRM 7.0.1 is affected by one reflected Cross-Site Scripting XSS vulnerability affecting version 7.0.1 and probably prior versions. This vulnerability could allow remote unauthenticated attackers to inject arbitrary web script or HTML via index.php?module=Contacts&view=List app parameter...

PT-2019-17888

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.6.0 through 4.10.1 Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Cabinet'. Recommendations For Cybozu Garoon versions 4.6.0...

PT-2019-17879

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.0.0 through 4.10.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'. Recommendations For Cybozu Garoon versions 4.0.0 through 4.10.1,...

PT-2019-17873

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.6.0 through 4.6.3 Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Portal'. Recommendations For Cybozu Garoon versions 4.6.0...

CVE-2019-5940: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Scheduler'...

CVE-2019-5947: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Cabinet'...

XSS Vulnerability at JEESNS Group Posts

JEESNS is an open source social management system developed on the JAVA enterprise level platform. JEESNS group posts at the existence of XSS vulnerability , an attacker can be exploited to inject arbitrary Web script or HTML...

XSS Vulnerability at JEESNS Microblogs

JEESNS is an open source social management system developed on JAVA's enterprise-class platform. JEESNS microblogging at the existence of XSS vulnerability , an attacker can use the vulnerability to inject arbitrary Web script or HTML...

CVE-2018-16139

Cross-site scripting XSS vulnerability in BIBLIOsoft BIBLIOpac 2008 allows remote attackers to inject arbitrary web script or HTML via the db or action parameter to to bin/wxis.exe/bibliopac/...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote attackers to inject arbitrary web script or HTML via the 1 page, 2 gbs, 3 side, 4 id, 5 imgid, 6 cat, or 7 orderby parameter...