Lucene search
+L

5972 matches found

NVD
NVD
•added 2022/02/15 11:15 p.m.•30 views

CVE-2021-46251

A reflected cross-site scripting XSS in ScratchOAuth2 before commit 1603f04e44ef67dde6ccffe866d2dca16defb293 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

6.1CVSS0.00562EPSS
SaveExploits0References1
Prion
Prion
•added 2022/02/15 7:15 p.m.•27 views

Cross site scripting

Burden v3.0 was discovered to contain a stored cross-site scripting XSS in the Add Category function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the task parameter...

4.3CVSS5.9AI score0.00775EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/02/15 6:27 p.m.•58 views

CVE-2022-24589

Burden v3.0 was discovered to contain a stored cross-site scripting XSS in the Add Category function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the task parameter...

6.1AI score0.00775EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/02/15 6:27 p.m.•41 views

CVE-2022-24589

Burden v3.0 was discovered to contain a stored cross-site scripting XSS in the Add Category function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the task parameter...

6.1AI score
SaveExploits0References4
NVD
NVD
•added 2022/02/15 4:15 p.m.•26 views

CVE-2022-24590

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS0.00624EPSS
SaveExploits1References2
NVD
NVD
•added 2022/02/15 4:15 p.m.•31 views

CVE-2022-24585

A stored cross-site scripting XSS vulnerability in the component /core/admin/comment.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the author parameter...

5.4CVSS0.00747EPSS
SaveExploits1References2
NVD
NVD
•added 2022/02/15 4:15 p.m.•42 views

CVE-2022-24587

A stored cross-site scripting XSS vulnerability in the component core/admin/medias.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS0.00744EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2022/02/15 4:15 p.m.•47 views

CVE-2022-24587

A stored cross-site scripting XSS vulnerability in the component core/admin/medias.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS6AI score0.00744EPSS
SaveExploits1References3
Prion
Prion
•added 2022/02/15 4:15 p.m.•30 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in the component core/admin/medias.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML...

3.5CVSS5.3AI score0.00744EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2022/02/15 4:15 p.m.•32 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

3.5CVSS5.4AI score0.00624EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/02/15 3:45 p.m.•37 views

CVE-2022-24590

A stored cross-site scripting XSS vulnerability in the Add Link function of BackdropCMS v1.21.1 allows attackers to execute arbitrary web scripts or HTML...

5.5AI score0.00624EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/02/15 3:40 p.m.•34 views

CVE-2022-24587

A stored cross-site scripting XSS vulnerability in the component core/admin/medias.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML...

5.9AI score
SaveExploits0References4
Mend
Mend
•added 2022/02/15 3:40 p.m.•8 views

CVE-2022-24587

A stored cross-site scripting XSS vulnerability in the component core/admin/medias.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML...

5.4CVSS0.00744EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2022/02/15 3:40 p.m.•111 views

CVE-2022-24587

Removed by vendor...

5.4CVSS5.5AI score0.00744EPSS
SaveExploits1
NVD
NVD
•added 2022/02/15 3:15 p.m.•42 views

CVE-2022-24227

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

6.1CVSS0.02256EPSS
SaveExploits1References3
Prion
Prion
•added 2022/02/15 3:15 p.m.•40 views

Cross site scripting

A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...

4.3CVSS5.9AI score0.02256EPSS
SaveExploits1References3Affected Software1
osv_cve
osv_cve
•added 2022/02/15 3:09 p.m.•22 views

CVE-2022-24585

A stored cross-site scripting XSS vulnerability in the component /core/admin/comment.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the author parameter...

5.7AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2022/02/15 3:09 p.m.•43 views

CVE-2022-24585

A stored cross-site scripting XSS vulnerability in the component /core/admin/comment.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the author parameter...

5.4AI score0.00747EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/02/15 1:54 p.m.•32 views

CVE-2022-24586

A stored cross-site scripting XSS vulnerability in the component /core/admin/categories.php of PluXml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the content and thumbnail parameters...

5.5AI score
SaveExploits0References4
CVE
CVE
•added 2022/02/15 1:54 p.m.•107 views

CVE-2022-24586

CVE-2022-24586: A stored XSS in PluXml v5.8.7 affecting /core/admin/categories.php, where crafted payloads in content and thumbnail parameters enable execution of arbitrary scripts/HTML. Exploit details and impact are described across multiple sources referencing the same vector; the exact remedi...

5.4CVSS5.2AI score0.00747EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder