7605 matches found
Cross site scripting
Multiple stored cross-site scripting XSS in the MyThemeShop Launcher plugin 1.0.8 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via fields as follows: 1 Title, 2 Favicon, 3 Meta Description, 4 Subscribe Form Name field label, Last name field label, Email...
CVE-2019-7411: Improper Neutralization of Input During Web Page Generation
Multiple stored cross-site scripting XSS in the MyThemeShop Launcher plugin 1.0.8 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via fields as follows: 1 Title, 2 Favicon, 3 Meta Description, 4 Subscribe Form Name field label, Last name field label, Email...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in UliCMS 2019.2 and 2019.1 allow remote attackers to inject arbitrary web script or HTML via the go parameter to admin/index.php, the go parameter to /admin/index.php?register=register, or the error parameter to admin/index.php?action=favicon...
CVE-2019-11564
HumHub 1.3.12 contains a stored/reflected XSS vulnerability reachable via a POST to /protected/vendor/codeception/codeception/tests/data/app/view/index.php. The CVE-2019-11564 entry is corroborated across multiple sources (NVD, Red Hat, CVE list) with consistent description of an attacker injecti...
CVE-2018-15581: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting XSS vulnerability in adm/faqmasterformupdate.php in gnuboard5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML...
Cross site scripting
Cross-site scripting XSS vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager DSM before 6.1.4-15217-3 allows remote authenticated users to inject arbitrary web script or HTML via the package parameter...
MISP Cross-Site Scripting Vulnerability (CNVD-2019-12145)
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and features threat cybersecurity event analysis and malware analysis hood. A cross-site scripting vulnerability exists in the default distribution template in the...
CVE-2019-9167: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Nagios XI before 5.5.11 allows attackers to inject arbitrary web script or HTML via the xiwindow parameter...
CVE-2018-15585
Cross-Site Scripting XSS vulnerability in newwinform.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter...
Cross site scripting
Cross-site scripting vulnerability in KinagaCMS versions prior to 6.5 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2019-5926: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in KinagaCMS versions prior to 6.5 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2018-15583
GNUBOARD5 (web forum, PHP/MySQL) contains a Cross-Site Scripting (XSS) flaw in point_list.php, exploitable via the popup title parameter. Affected versions are prior to 5.3.1.6. The vulnerability could allow remote attackers to execute arbitrary web script/HTML. Remediation: upgrade to GNUBOARD5 ...
CVE-2018-15583
Cross-Site Scripting XSS vulnerability in pointlist.php in GNUBOARD5 before 5.3.1.6 allows remote attackers to inject arbitrary web script or HTML via the popup title parameter...
Cross site scripting
A reflected Cross-site scripting XSS vulnerability in ShoreTel Connect ONSITE 19.45.1602.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...
CVE-2019-9591
ShoreTel Connect ONSITE prior to 19.49.1500.0 is affected by a reflected XSS via the brandUrl parameter. Impact is arbitrary script injection in the user’s browser. Root cause: unvalidated input reflected into the page. Affected component: signin.php (brandUrl parameter). Remediation: upgrade to ...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in GET requests in FreshRSS 1.11.1 allow remote attackers to inject arbitrary web script or HTML via the 1 c parameter or 2 a parameter...
CVE-2018-20729
A reflected cross site scripting XSS vulnerability in NeDi before 1.7Cp3 allows remote attackers to inject arbitrary web script or HTML via the reg parameter in mh.php...
Multiple Cross-site Scripting (XSS) Vulnerabilities
Multiple cross-site scripting XSS vulnerabilities in actionpack/lib/actionview/helpers/numberhelper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the 1 format, 2 negativeformat, or 3 units...