CVE-2017-2187

CVE-2017-2187 describes a cross-site scripting vulnerability in WordPress plugin WP Live Chat Support prior to version 7.0.07 . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The affected component is the plugin’s frontend handling which can exec...

CVE-2016-4906

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cybozu Garoon Keitai...

CVE-2016-7808

Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-7813

Cross-site scripting vulnerability in DERAEMON-CMS version 0.8.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the parameters hostname, database and username...

CVE-2016-7469

A stored cross-site scripting XSS vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an...

CVE-2016-7823: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

Craft CMS Cross-Site Scripting Vulnerability (CNVD-2017-13599)

Craft CMS is a content management system CMS. Craft CMS suffers from a cross-site scripting vulnerability. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PT-2017-9359

Name of the Vulnerable Software and Affected Versions Corega CG-WLBARGMH affected versions not specified Corega CG-WLBARGNL affected versions not specified Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For Corega...

PT-2017-9368

Name of the Vulnerable Software and Affected Versions Simple keitai chat versions 2.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 2.0 and earlier, update to a version late...

CVE-2016-7817: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Simple keitai chat 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4906: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cybozu Garoon Keitai...

PT-2017-9374

Name of the Vulnerable Software and Affected Versions Buffalo WNC01WH versions 1.0.0.0 through 1.0.0.8 Description A cross-site scripting issue allows authenticated attackers to inject arbitrary web script or HTML. Recommendations For Buffalo WNC01WH versions 1.0.0.0 through 1.0.0.8, update to a...

CVE-2016-7469: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an...

CVE-2016-7808: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2187: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CGI:IRC irc.cgi file cross-site scripting vulnerability

CGI:IRC is a Perl/CGI program that enables users to access IRC from a Web browser. A cross-site scripting vulnerability exists in the irc.cgi file in versions of CGI:IRC prior to 0.5.12. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2017-9452

Cross-site scripting XSS vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2017-9452

Cross-site scripting XSS vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to inject arbitrary web script or HTML via the description parameter. This issue exists in core\admin\ajax\pages\save-revision.php and core\admin\modules\pages\revisions.php. Low-privileged...