CVE-2020-14208

SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting XSS in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML...

CVE-2020-14208

SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting XSS in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML...

Cross site scripting

SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting XSS in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML...

CVE-2020-22723

CVE-2020-22723 affects Beijing Liangjing Zhicheng Technology Co., Ltd ljcmsshop, version 1.14. The vulnerability is a cross-site scripting (XSS) flaw that can be triggered via user.php when a user registers in the user center and adds a payload to the delivery address. The NVD entry reports CVSS ...

CVE-2020-14208

SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting XSS in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML...

PT-2020-15501

Name of the Vulnerable Software and Affected Versions ljcmsshop version 1.14 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via user.php by registering an account directly in the user center and adding the payload to the delivery addres...

CVE-2020-25798

A stored cross-site scripting XSS vulnerability in LimeSurvey before and including 3.21.1 allows authenticated users with correct permissions to inject arbitrary web script or HTML via parameter ParticipantAttributeNamesDropdown of the Attributes on the central participant database page. When the...

CVE-2020-25798

Summary: CVE-2020-25798 describes a stored XSS in LimeSurvey versions up to 3.21.1. An authenticated user with appropriate permissions can inject arbitrary script/HTML via the Parameter ParticipantAttributeNamesDropdown on the central participant database page, causing the browser to execute the ...

HP Insight Diagnostics Online Edition Cross-Site Scripting (CVE-2010-4111)

A script injection vulnerability exists in HP Insight Diagnostics. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

CVE-2020-27193

A cross-site scripting XSS vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs...

CVE-2020-27193

A cross-site scripting XSS vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs...

CVE-2020-27193

CVE-2020-27193 is an XSS in CKEditor 4.15.0 Color Dialog. A remote attacker can lure a user to paste crafted HTML into the editor, causing script execution in the user’s browser. The vulnerability is addressed by CKEditor 4.15.1 security patch; IBM/OSS bulletins also reference the fix. Affected p...

Cross site scripting

Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security ENS prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML via the configuration wizard...

CVE-2020-27193: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs...

Red Lion N-Tron Cross Site Scripting (CVE-2020-16206)

A cross-site scripting vulnerability exists in Red Lion N-Tron. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

PT-2020-5988

Name of the Vulnerable Software and Affected Versions CKEditor version 4.15.0 Description A cross-site scripting XSS vulnerability in the Color Dialog plugin for CKEditor allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of th...

phpLDAPadmin < 1.2.4 XSS Vulnerability - Windows

phpLDAPadmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cross site scripting

AudimexEE before 14.1.1 is vulnerable to Reflected XSS Cross-Site-Scripting. If the recommended security configuration parameter "uniqueerrornumbers" is not set, remote attackers can inject arbitrary web script or HTML via 'action, cargo, panel' parameters that can lead to data leakage...

CVE-2020-28047

AudimexEE before 14.1.1 is vulnerable to Reflected XSS Cross-Site-Scripting. If the recommended security configuration parameter "uniqueerrornumbers" is not set, remote attackers can inject arbitrary web script or HTML via 'action, cargo, panel' parameters that can lead to data leakage...

PT-2020-16910

Name of the Vulnerable Software and Affected Versions AudimexEE versions prior to 14.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via 'action, cargo, panel' parameters, potentially leading to data leakage. This occurs when the recommended security...