CVE-2016-6347

Cross-site scripting XSS vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2017-8550

Name of the Vulnerable Software and Affected Versions Geeklog IVYWE edition version 2.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML, leveraging the use of the COM getCurrentURL function in various template files, including 1 public...

CVE-2016-6333: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the CSS user subpage preview feature in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote attackers to inject arbitrary web script or HTML via the edit box in Special:MyPage/common.css...

Cross site scripting

Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the Schedule function...

PT-2017-8563

Name of the Vulnerable Software and Affected Versions Cybozu Office versions 9.0.0 through 10.4.0 Description A cross-site scripting issue allows attackers with administrator rights to inject arbitrary web script or HTML via the Project function. Recommendations For Cybozu Office versions 9.0.0...

CVE-2014-3887

Cross-site scripting XSS vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Oliver formerly Webshare 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the 1 login page index.php or 2 login form loginform-inc.php...

PT-2017-5849

Name of the Vulnerable Software and Affected Versions: Oliver formerly Webshare versions 1.3.1 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to specific pages, including the login page at "index.php" and the login form at...

PT-2017-7229

Name of the Vulnerable Software and Affected Versions Ember.js versions 1.8.x through 1.10.x Ember.js versions 1.11.x before 1.11.4 Ember.js versions 1.12.x before 1.12.2 Ember.js versions 1.13.x before 1.13.12 Ember.js versions 2.0.x before 2.0.3 Ember.js versions 2.1.x before 2.1.2 Ember.js...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via 1 the collectiondescription parameter to upload/managecollections.php in an addnew action or the 2 photodescription, 3 phototags, or 4 phototitle...

CVE-2015-4673

Multiple cross-site scripting XSS vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via 1 the collectiondescription parameter to upload/managecollections.php in an addnew action or the 2 photodescription, 3 phototags, or 4 phototitle...

CVE-2016-6846

Cross-site scripting XSS vulnerability in Open-Xchange OX AppSuite backend before 7.6.2-rev59, 7.8.0 before 7.8.0-rev38, 7.8.2 before 7.8.2-rev8; AppSuite frontend before 7.6.2-rev47, 7.8.0 before 7.8.0-rev30, and 7.8.2 before 7.8.2-rev8; Office Web before 7.6.2-rev16, 7.8.0 before 7.8.0-rev10, a...

CVE-2017-7271

Reflected Cross-site scripting XSS vulnerability in Yii Framework before 2.0.11, when development mode is used, allows remote attackers to inject arbitrary web script or HTML via crafted request data that is mishandled on the debug-mode exception screen...

PT-2017-7392

Name of the Vulnerable Software and Affected Versions Cherry Music versions prior to 0.36.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when...

CVE-2015-8310: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when creating a new playlist...

Cross site scripting

Cross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68.js and the organisation landing page in app/View/Organisations/ajax/landingpage.ctp of MISP before 2.4.69 allows remote attackers to inject arbitrary web script or HTML...

CVE-2014-8707

Cross-site scripting XSS vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote authenticated users to inject arbitrary web script or HTML via the "edit HTML source" option...

CVE-2014-8703

Cross-site scripting XSS vulnerability in Wonder CMS 2014 allows remote attackers to inject arbitrary web script or HTML...

CVE-2014-8703

Cross-site scripting XSS vulnerability in Wonder CMS 2014 allows remote attackers to inject arbitrary web script or HTML...

PT-2017-6702

Name of the Vulnerable Software and Affected Versions qdPM version 8.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including the searchkeywords parameter to "index.php/users" page, the "Name of application" on...