CVE-2017-15941

Cross-site scripting XSS vulnerability in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.7, when the GlobalProtect gateway or portal is configured, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0011: Improper Neutralization of Input During Web Page Generation

A reflected cross site scripting XSS vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device...

PT-2018-8434

Name of the Vulnerable Software and Affected Versions Gespage versions prior to 7.4.9 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the printer name when adding a printer in the admin panel or the username parameter to...

CVE-2015-7666

Multiple cross-site scripting XSS vulnerabilities in the 1 cpupdateMessageItem and 2 cpdeleteMessageItem functions in cppppadminintmessagelist.inc.php in the Payment Form for PayPal Pro plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the cal...

CVE-2015-7324

Multiple cross-site scripting XSS vulnerabilities in helpers/comment.php in the StackIdeas Komento comkomento component before 2.0.5 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 img or 2 url tag of a new comment...

PHP Scripts Mall Readymade Video Sharing Script Cross-Site Request Forgery Vulnerability

PHP Scripts Mall Readymade Video Sharing Script is a set of PHP based online video sharing website scripts by PHP Scripts Mall India. A cross-site request forgery vulnerability exists in PHP Scripts Mall Readymade Video Sharing Script. A remote attacker can use the user-profile-edit.php file to...

CVE-2017-16766

An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager DSM before 6.1.4-15217 and before 6.0.3-8754-6 allows local users to inject arbitrary web script or HTML via the -fn option...

PT-2017-14548 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.1.4-15217 Synology DiskStation Manager DSM versions prior to 6.0.3-8754-6 Description: An improper access control issue in synodsmnotify allows local users to inject arbitrary web script or...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in uistats.php in the bSuite plugin before 5 alpha 3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 s or 2 p parameters to index.php...

CVE-2013-6465

Multiple cross-site scripting XSS vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task name html inputs...

CYBERNET SYSTEMS Maplesoft Maple Cross-Site Scripting Vulnerability

CYBERNET SYSTEMS Maplesoft Maple T.A. is a general-purpose software tool for mathematics, data analysis, visualization, and programming from CYBERNET SYSTEMS, Japan. A cross-site scripting vulnerability exists in the password recovery page in CYBERNET SYSTEMS Maplesoft Maple T.A. version 2016.0.6...

CVE-2017-16950: Improper Neutralization of Input During Web Page Generation

Cross - site scripting XSS vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in Integration Matters nJAMS 3 before 3.2.0 Hotfix 7, as used in TIBCO BusinessWorks Process Monitor through 3.0.1.3 and other products, allows remote authenticated administrators to inject arbitrary web script or HTML via the users management panel of the w...

Cross site scripting

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

PT-2017-11590

Name of the Vulnerable Software and Affected Versions Buffalo BBR-4HG and BBR-4MG versions 1.00 through 1.48 Buffalo BBR-4HG and BBR-4MG versions 2.00 through 2.07 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

Cross-site Scripting (XSS)

drupal/core is vulnerable to cross-site scripting XSS attacks. The library does not sanitize the strings in the exception backtrace, allowing a malicious user to inject and execute arbitrary web script through an exception...

Fortinet FortiOS SSL-VPN Portal Cross-Site Scripting Vulnerability

Fortinet FortiOS is a set of security operating system developed by American Fita Fortinet dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. ssl-vpn portal is one of...

CVE-2017-10886

CS-Cart Japanese Edition (and Multivendor Japanese Edition) is affected by CVE-2017-10886. A cross-site scripting vulnerability exists in CS-Cart Japanese Edition versions 4.3.10 and earlier (excluding v2/v3), enabling an attacker to inject arbitrary web script or HTML via unspecified vectors. Th...

CVE-2017-10886: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier excluding v2 and v3, CS-Cart Multivendor Japanese Edition v4.3.10 and earlier excluding v2 and v3 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-1000240: Improper Neutralization of Input During Web Page Generation

The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting XSS vulnerabilities affecting version 5.0.0 and prior versions. These vulnerabilities could allow remote authenticated attackers to inject arbitrary web script or HTML...