Cross site scripting

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function...

CVE-2017-2257: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function...

CVE-2017-10837: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-10838: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2256

CVE-2017-2256 affects Cybozu Garoon 3.0.0 to 4.2.5, with a stored cross-site scripting (XSS) vulnerability in the Rich text functionality of the Memo application that can cause arbitrary script execution in the user’s browser. The issue is documented across multiple sources (NVD/NVD CVE entry; JV...

CVE-2017-10838

The CVE-2017-10838 entry concerns SEO Panel prior to version 3.11.0, with a Cross-site scripting (CWE-79) vulnerability that allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Affected software is SEO Panel; the underlying exposure is in the web interface, leading ...

CVE-2017-2255

CVE-2017-2255 affects Cybozu Garoon versions 3.7.0 to 4.2.5 and is a stored XSS in the Rich text function of the Space app. Public sources (NVD, JVN/OpenVAS) confirm the vulnerability is a client-side script injection that could execute in an authenticated user’s browser. The connected OpenVAS en...

CVE-2017-10838

Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2255

Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space"...

CVE-2017-2257

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function...

CVE-2017-10840

Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter...

CVE-2013-7430

Cross-site scripting XSS vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter...

PT-2017-11545

Name of the Vulnerable Software and Affected Versions BackupGuard versions prior to 1.1.47 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 1.1.47, update to version 1.1.47 or later to...

PT-2017-11548

Name of the Vulnerable Software and Affected Versions WebCalendar versions 1.2.7 and earlier Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 1.2.7 and earlier, update to a version later than...

PT-2017-11546

Name of the Vulnerable Software and Affected Versions SEO Panel versions prior to 3.11.0 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML. Recommendations For versions prior to 3.11.0, update to version 3.11.0 or later to resolve the issue...

CVE-2015-4699

Cross-site scripting XSS vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI...

Cross site scripting

Cross-site scripting XSS vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI...

CVE-2015-4699

Cross-site scripting XSS vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject arbitrary web script or HTML via the recoveryMessage parameter to the default URI...

CVE-2015-4699

The affected product is Cloud4Wi Splash Portal (before version 5.9.7). A Cross-Site Scripting (XSS) vulnerability exists in the Splash Portal that allows remote attackers to inject arbitrary web script or HTML by supplying malicious input to the recoveryMessage parameter in the default URI. This ...