CVE-2015-6584

Cross-site scripting XSS vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unittesting/templates/6776.php...

CVE-2015-6921: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators with the "Configure Zendesk Feedback Tab" permission to inject arbitrary web script or HTML via unspecified vectors...

rakuto.net hitSuji Cross-Site Scripting Vulnerability

rakuto.net hitSuji is an open source SNS social networking site software. A cross-site scripting vulnerability in rakuto.net hitSuji 0.2.2b allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content, aka "Microsoft SharePoint XSS Spoofing Vulnerability."...

CVE-2015-2536

The CVE-2015-2536 issue is an XSS vulnerability in Microsoft Lync Server 2013 and Skype for Business Server 2015. The root cause is improper sanitization of input (notably via crafted URLs in the web context), enabling remote attackers to execute arbitrary script or HTML in a logged-in user’s bro...

CVE-2015-2522: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary web script or HTML via crafted content, aka "Microsoft SharePoint XSS Spoofing Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter...

CVE-2015-2985

CVE-2015-2985 concerns guide-park.com BBS X102 1.03, a bulletin board software. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary script or HTML via unspecified vectors, with the browser executing the payload. Affected software is BBS X102 Ver...

PT-2015-6032

Name of the Vulnerable Software and Affected Versions rktSNS2 version 0.2.2b Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations For version 0.2.2b, at the moment, there is no...

CVE-2015-5612

Affected software: October CMS (build 271 and earlier). Vulnerability: cross-site scripting (XSS) via the caption tag of a profile image. Root cause: improper handling of caption tag leads to script/HTML injection. Impact: remote attacker can inject arbitrary script/HTML. Exploitation details are...

CVE-2015-6810

CVE-2015-6810 is an XSS vulnerability in Invision Power Services IPS Community Suite (IPS Community Suite) 4.x up to version 4.0.12.1. Remote authenticated users can inject arbitrary web script or HTML via the event_location[address] array parameter to calendar/submit/. The NVD entry lists a base...

Cross site scripting

Cross-site scripting XSS vulnerability in the quick edit function in xmlhttp.php in MyBB aka MyBulletinBoard before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the content of a post...

CVE-2015-6506

Cross-site scripting XSS vulnerability in the cryptography interface in Request Tracker RT before 4.2.12 allows remote attackers to inject arbitrary web script or HTML via a crafted public key...

CVE-2015-6729

Cross-site scripting XSS vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to inject arbitrary web script or HTML via the rel404 parameter, which is not properly handled in an error page...

Cross site scripting

Cross-site scripting XSS vulnerability in libahttp/err.c in OkCupid OKWS OK Web Server allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to a non-existent page, which is not properly handled in a 404 error page...

CVE-2014-6616

Cross-site scripting XSS vulnerability in Softing FG-100 PROFIBUS Single Channel FG-100-PB with firmware FG-x00-PBV2.02.0.00 allows remote attackers to inject arbitrary web script or HTML via the DEVICENAME parameter to cgi-bin/CFGhttp/...

Cross site scripting

Cross-site scripting XSS vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified input to admin.php...

Electric Sheep Fencing Pfsense WebGUI Cross-Site Scripting Vulnerability

Electric Sheep Fencing pfsense is a free and open source FreeBSD-based firewall and router software from Electric Sheep Fencing. A cross-site scripting vulnerability exists in the WebGUI of Electric Sheep Fencing pfSense versions prior to 2.2.3, which stems from the servicescaptiveportalzones.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the 1 section parameter to site/error.php or 2 ip parameter to site/tools/searchResults.php...

Cross site scripting

Cross-site scripting XSS vulnerability in OpenText Secure MFT 2013 before 2013 R3 P6 and 2014 before 2014 R2 P2 allows remote attackers to inject arbitrary web script or HTML via the querytext parameter to userdashboard.jsp...