Cross site scripting

Cross-site scripting XSS vulnerability in assets/js/vm2admin.js in the VirtueMart component before 3.0.8 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors involving a "double encode combination of firstname, lastname and company."...

CVE-2015-3619

Cross-site scripting XSS vulnerability in assets/js/vm2admin.js in the VirtueMart component before 3.0.8 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors involving a "double encode combination of firstname, lastname and company."...

CVE-2015-3618

Nagios Business Process Intelligence (BPI) is affected by a Cross-site scripting (XSS) vulnerability in which an attacker can inject arbitrary web script or HTML via index.php. The issue affects BPI releases prior to 2.3.4. Root cause is an XSS flaw in the web interface, leading to potential impa...

CVE-2018-6466

A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSSset parameter to wp-admin/options-general.php...

Cross site scripting

A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSSid parameter to wp-admin/options-general.php...

CVE-2018-6469

A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSStags parameter to wp-admin/options-general.php...

Cross site scripting

A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSStags parameter to wp-admin/options-general.php...

Cross site scripting

A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSSset parameter to wp-admin/options-general.php...

CVE-2018-6468

CVE-2018-6468 describes a cross-site scripting (XSS) vulnerability in the flickrRSS.php file of the WordPress flickrRSS plugin (version 5.3.1). The issue allows remote attackers to inject arbitrary web script or HTML by supplying a crafted flickrRSS_id parameter to wp-admin/options-general.php. T...

CVE-2018-6469

The CVE concerns a cross-site scripting (XSS) flaw in WordPress’s flickrRSS plugin, version 5.3.1. The vulnerability lies in flickrRSS.php, exploitable via the flickrRSS_tags parameter submitted to wp-admin/options-general.php. This allows remote attackers to inject arbitrary web script or HTML. ...

CVE-2018-6469

A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSStags parameter to wp-admin/options-general.php...

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

Synacor Zimbra Collaboration Suite ZCS is an open source collaboration suite from Synacor, Inc. that includes WebMail, Calendar, Address Book and more. A cross-site scripting vulnerability exists in Synacor ZCS. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HT...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Tivoli Integrated Portal 2.2.0.0 through 2.2.0.15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111480...

CVE-2016-0311

Cross-site scripting XSS vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111480...

CVE-2016-0303

Cross-site scripting XSS vulnerability in IBM Tivoli Integrated Portal 2.2.0.0 through 2.2.0.15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-0311

Cross-site scripting XSS vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP0004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111480...

CVE-2015-2796

Multiple cross-site scripting XSS vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script or HTML via the searchfor parameter to 1 searchbytag.php, 2 searchcontacts.php, or 3 search.php...

CVE-2015-2796

Project-Pier ProjectPier-Core is affected by multiple XSS vulnerabilities in the search functionality. The issue arises from the search_for parameter being unsafely echoed by three pages: search_by_tag.php, search_contacts.php, and search.php, enabling remote attackers to inject arbitrary web scr...

CVE-2016-0311

IBM Tivoli Business Service Manager (TBSM) versions affected: 6.1.0 prior to 6.1.0-TIV-BSM-FP0004 and 6.1.1 prior to 6.1.1-TIV-BSM-FP0004. Description across sources identifies a cross-site scripting (XSS) vulnerability stemming from improper validation of user-supplied input, enabling a remote a...