CVE-2018-16173

CVE-2018-16173 affects the WordPress LearnPress plugin prior to version 3.1.0. The vulnerability is a cross-site scripting (XSS) flaw that can let remote attackers inject arbitrary web script or HTML via unspecified vectors, potentially causing arbitrary script execution in the logged-in user’s b...

CVE-2018-16164: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2019-9259

Name of the Vulnerable Software and Affected Versions Aterm WF1200CR versions 1.1.1 and earlier Aterm WG1200CR versions 1.0.1 and earlier Description A cross-site scripting issue allows authenticated attackers to inject arbitrary web script or HTML. Recommendations For Aterm WF1200CR versions 1.1...

CVE-2018-16180: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in i-FILTER Ver.9.50R05 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0698: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

A reflected cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote attackers to inject arbitrary web script or HTML via the transphrase parameter to public/notice.php...

CVE-2018-19992

A stored cross-site scripting XSS vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" POST or "town" POST parameter to adherents/type.php...

CVE-2018-19414

Multiple cross-site scripting XSS vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to groups.php; 2 username parameter to login.php; or 3 date parameter to search.php...

CVE-2018-19993

CVE-2018-19993 affects Dolibarr 8.0.2 and is a reflected XSS vulnerability that allows an attacker to inject arbitrary web script or HTML via the transphrase parameter to public/notice.php. The provided connected documents confirm the vulnerable component and entry details but do not specify a ve...

Micro Focus NetIQ iManager Cross-Site Scripting Vulnerability

Micro Focus NetIQ iManager is a WEB-based application from Micro Focus UK. The program can manage, configure eDirectory objects using wireless devices. A cross-site scripting vulnerability exists in Micro Focus NetIQ iManager versions prior to 3.1 SP2, which can be exploited by remote attackers t...

Cross site scripting

Cross-site scripting XSS vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter...

CVE-2018-19794

Cross-site scripting XSS vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter...

CVE-2018-19794

Cross-site scripting XSS vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter...

JTBC(PHP) Cross-Site Scripting Vulnerability

JTBC PHP is an open source CMS Content Management System. A cross-site scripting vulnerability exists in JTBC PHP version 3.0.1.7. A remote attacker can exploit the vulnerability by sending the 'content' parameter to console/xml/manage.php?type=action&action=edit URL to inject arbitrary Web scrip...

Branch.io Cross-Site Scripting

A Cross Site Scripting XSS vulnerability exists in Branch.io. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

CVE-2018-0699: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in YukiWiki 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0687: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Denbun by NEOJAPAN Inc. Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0697: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Metabase version 0.29.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0695: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in User-friendly SVN USVN Version 1.0.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Centreon Cross-Site Scripting Vulnerability (CNVD-2019-00831)

Centreon formerly known as Merethis Centreon is an open source IT monitoring software suite from Centreon France that needs to be paired with Nagios to manage Nagios via the web and third-party components to enable monitoring of networks, operating systems and applications. A cross-site scripting...