CVE-2020-25875

A stored cross site scripting XSS vulnerability in the 'Smileys' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Smiley Code' parameter...

CVE-2020-35984

A stored cross site scripting XSS vulnerability in the 'Users Alerts' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Title' parameter...

CVE-2020-35984

A stored cross site scripting XSS vulnerability in the 'Users Alerts' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Title' parameter...

CVE-2020-35987

A stored cross site scripting XSS vulnerability in the 'Entities List' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Name' parameter...

PT-2021-11195

Name of the Vulnerable Software and Affected Versions: Codoforum version 5.0.2 Description: A stored cross site scripting XSS issue in the 'Smileys' feature allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Smiley Code parameter...

PT-2021-11134

Name of the Vulnerable Software and Affected Versions: CSZ CMS version 1.2.9 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the New Article field under the Article plugin. This enables attackers to...

PT-2021-11198

Name of the Vulnerable Software and Affected Versions: BlackCat CMS version 1.3.6 Description: A stored cross site scripting XSS issue in the 'Admin-Tools' feature allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads entered into the Output Filters and...

PT-2021-11133

Name of the Vulnerable Software and Affected Versions: CSZ CMS version 1.2.9 Description: A cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the New Pages field under the Pages Content module. Recommendations: For CSZ CMS...

PT-2021-11196

Name of the Vulnerable Software and Affected Versions: Codoforum version 5.0.2 Description: A stored cross site scripting XSS issue in the 'Pages' feature allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Page Title parameter...

Codoforum 跨站脚本漏洞

Codoforum is a set of PHP and MySQL based forum software. A cross-site scripting vulnerability exists in Codoforum version 5.0.2, which can be exploited by an authenticated attacker to execute arbitrary web script or HTML via a crafted payload with the "Manage Users" parameter...

PT-2021-11197

Name of the Vulnerable Software and Affected Versions: BlackCat CMS version 1.3.6 Description: A stored cross site scripting XSS issue in the 'Add Page' feature allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Title parameter...

PT-2021-11135

Name of the Vulnerable Software and Affected Versions: moziloCMS version 2.0 Description: A stored cross site scripting XSS issue allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Content parameter. Recommendations: For moziloCMS versio...

CVE-2020-25391: Improper Neutralization of Input During Web Page Generation

A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...

CVE-2020-20584

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/...

CVE-2020-20584

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/...

CVE-2020-20584: Improper Neutralization of Input During Web Page Generation

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/...

CVE-2021-34625

A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and prior...

Design/Logic Flaw

A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and prior...

CVE-2021-34625: Improper Neutralization of Input During Web Page Generation

A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and prior...

Cross site scripting

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Name" or "Prefix" fields under the "Create New Rate" module...