PT-2019-9246

Name of the Vulnerable Software and Affected Versions i-FILTER versions prior to 9.50R05 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 9.50R05, update to a version later than 9.50R05 to resolve the...

PT-2019-9238

Name of the Vulnerable Software and Affected Versions LearnPress versions prior to 3.1.0 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 3.1.0, update to version 3.1.0 or later t...

PT-2019-9229

Name of the Vulnerable Software and Affected Versions Event Calendar WD versions 1.1.21 and earlier Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML. Recommendations For Event Calendar WD versions 1.1.21 and earlier, update to a...

PT-2019-9230

Name of the Vulnerable Software and Affected Versions LogonTracer versions 1.2.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For LogonTracer versions 1.2.0 and earlier, at the moment, there is no information...

CVE-2018-16173: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in LearnPress prior to version 3.1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2019-9259

Name of the Vulnerable Software and Affected Versions Aterm WF1200CR versions 1.1.1 and earlier Aterm WG1200CR versions 1.0.1 and earlier Description A cross-site scripting issue allows authenticated attackers to inject arbitrary web script or HTML. Recommendations For Aterm WF1200CR versions 1.1...

CVE-2018-16180: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in i-FILTER Ver.9.50R05 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2019-9264

Name of the Vulnerable Software and Affected Versions Toshiba Home gateway HEM-GW16A versions 1.2.9 and earlier Toshiba Home gateway HEM-GW26A versions 1.2.9 and earlier Description A cross-site scripting issue allows a remote attacker to inject arbitrary web script or HTML via unspecified vector...

CVE-2018-16164: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2019-9268

Name of the Vulnerable Software and Affected Versions Google XML Sitemaps versions 4.0.9 and earlier Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML. Recommendations For Google XML Sitemaps versions 4.0.9 and earlier, update to...

mistune Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...

GHSA-98GJ-WWXM-CJ3H mistune Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument...

Moderate severity vulnerability that affects moin

Cross-site scripting XSS vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

GHSA-42FP-4HM3-J8R7 Moderate severity vulnerability that affects moin

Cross-site scripting XSS vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-19993

A reflected cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the transphrase parameter to public/notice.php...

CVE-2018-19995

A stored cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" POST or "town" POST parameter to user/card.php...

CVE-2018-19995

A stored cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" POST or "town" POST parameter to user/card.php...

CVE-2018-19993

A reflected cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the transphrase parameter to public/notice.php...

CVE-2018-19992

A stored cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" POST or "town" POST parameter to adherents/type.php...

CVE-2018-19995

A stored cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" POST or "town" POST parameter to user/card.php...