CVE-2013-4795

Cross-site scripting XSS vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user full name...

CVE-2013-2033: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allows remote authenticated users with write permission to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the RuntimeSetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...

flash-plugin: cross-site scripting flaw (APSB14-09)

Cross-site scripting XSS vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83...

Cross site scripting

Cross-site scripting XSS vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to template placeholders, as demonstrated by a request to 1 admin/reports/, 2...

PT-2014-3674

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 11.7.700.275 Adobe Flash Player versions 11.8.x through 13.0.x prior to 13.0.0.182 Adobe Flash Player version prior to 11.2.202.350 on Linux Adobe AIR versions prior to 13.0.0.83 on Android Adobe AIR SDK...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Horde Kronolith Calendar Application H4 before 3.0.18, as used in Horde Groupware Webmail Edition before 4.0.9, allow remote attackers to inject arbitrary web script or HTML via crafted event location parameters in the 1 month, 2 monthlist, or ...

CVE-2012-5566

Affected software: Horde Kronolith (H4) 3.0.x used in Horde Groupware Webmail Edition prior to 4.0.8. Vulnerability: multiple XSS flaws in the tasks view and search view, due to input handling in Kronolith before 3.0.17. Impact: remote attackers can inject arbitrary web script or HTML. Remediatio...

PT-2014-2340

Name of the Vulnerable Software and Affected Versions Horde Kronolith Calendar Application H4 versions prior to 3.0.17 Horde Groupware Webmail Edition versions prior to 4.0.8 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the tasks...

CVE-2014-0638

Cross-site scripting XSS vulnerability in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scripting" issue...

Cross site scripting

Cross-site scripting XSS vulnerability in the back-office case-management application in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-2287

Multiple cross-site scripting XSS vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 notify or 2 blog parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the Social Rendering implementation in the IBM Connections integration in IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF11 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0828: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WCM Web Content Manager UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF11 allows remote attackers to inject arbitrary web script or HTML via unspecified...

Chimera Web Portal System modules.php comment_poster Cross-Site Scripting - Ver2 (CVE-2006-0136)

A cross-site scripting vulnerability has been reported in Phanatic Softwares Chimera Web Portal. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

Cross site scripting

Cross-site scripting XSS vulnerability in Properties.do in ZOHO ManageEngine OpStor before build 8500 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter, a different vulnerability than CVE-2014-0344...

CVE-2014-0089

Cross-site scripting XSS vulnerability in app/views/common/500.html.erb in Foreman 1.4.x before 1.4.2 allows remote authenticated users to inject arbitrary web script or HTML via the bookmark name when adding a bookmark...

CVE-2013-5951

CVE-2013-5951 affects extplorer (2.1.3) used as a Joomla! component. The vulnerability arises from multiple cross-site scripting (XSS) flaws via PATH_INFO in application.js.php, admin.php, copy_move.php, functions.php, header.php, and upload.php (include/ directory). Consequence: remote attackers...

CVE-2014-2016

OXID eShop XSS in multiple versions (Professional/Community: 4.6.8 and earlier, 4.7.x < 4.7.11, 4.8.x < 4.8.4; Enterprise: 4.6.8 and earlier, 5.0.x < 5.0.11, 5.1.x

PT-2014-4762

Name of the Vulnerable Software and Affected Versions BarracudaDrive versions prior to 6.7 Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters to different API endpoints, including "/Forum/manage/ForumManager.lsp" with sForumName or...