Cross site scripting

Cross-site Scripting XSS vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name...

CVE-2020-29315

ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML...

Cross site scripting

ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML...

CVE-2020-29315

ThinkAdmin version v1 v6 has a stored XSS vulnerability which allows remote attackers to inject an arbitrary web script or HTML...

CVE-2020-29315

CVE-2020-29315 corresponds to a stored XSS vulnerability in ThinkAdmin (versions v1–v6). The core issue is a stored script/HTML injection that can be executed in the context of the affected web app. Documented references consistently describe ThinkAdmin v1/v6 as vulnerable and note remote attacke...

CVE-2019-16958: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in SolarWinds Web Help Desk 12.7.0 allows attacker to inject arbitrary web script or HTML via Location Name...

WonderCMS Persistent Cross-Site Scripting

A cross-site scripting vulnerability exists in WonderCMS. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

CVE-2020-27659

Multiple cross-site scripting XSS vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 profile parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 profile parameter...

CVE-2020-27659

Multiple cross-site scripting XSS vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 profile parameter...

Nagios Log Server Persistent Cross-Site Scripting

A persistent cross site scripting vulnerability exists in Nagios Log Server. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Simplephpscripts News Script PHP Pro SQL Injection Vulnerability

News Script PHP Pro is a PHP/MySQL based web script from Simple PHP Scripts for displaying news on your website. News Script PHP Pro 2.3 suffers from a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the id parameter in the editNews action...

Simplephpscripts News Script PHP Pro Cross-site Scripting Vulnerabilities

News Script PHP Pro is a PHP/MySQL based web script from Simple PHP Scripts for displaying news on your website. A cross-site scripting vulnerability exists in News Script PHP Pro 2.3. The vulnerability can be exploited to conduct cross-site scripting attacks via the editorname parameter...

Sonatype Nexus Repository Stored Cross Site Scripting (CVE-2020-10203)

A cross-site scripting vulnerability exists in Sonatype Nexus Repository. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

OpenMRS Cross-Site Scripting (CVE-2020-5730)

A cross-site scripting vulnerability exists in OpenMRS. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...

Joomla Publisher Component Persistent Cross-Site Scripting

A cross-site scripting vulnerability exists in Joomla Publisher Component. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

File Upload Vulnerability in Helper CRM Customer Management System (CNVD-2020-69433)

The HelpManager CRM customer management system is a general-purpose customer relationship management system for small and medium-sized enterprises. The CRM Customer Management System has a file upload vulnerability that can be exploited by attackers to gain server privileges by uploading a php fi...

Citadel WebCit Cross Site Scripting (CVE-2020-27739)

A cross-site scripting vulnerability exists in Citadel WebCit. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

CactuShop invoice.asp Cross-Site Scripting (CVE-2010-1486)

A cross-site scripting vulnerability exists in Cactushop cactushop 3. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

CVE-2020-7571: Improper Neutralization of Input During Web Page Generation

A CWE-79 Multiple Improper Neutralization of Input During Web Page Generation Cross-site Scripting Reflected vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker to inject arbitrary web script or HTML due to incorrect sanitization of use...