CVE-2020-19295: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-19281: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username field...

Bug Library < 2.0.4 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the via the successimportcount parameter found in the /bug-library.php file which allows attackers to inject arbitrary web scripts...

PT-2021-10334

Name of the Vulnerable Software and Affected Versions: Jeesns version 1.4.2 Description: A stored cross-site scripting XSS issue in the /article/comment component allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section. Recommendations: For...

CVE-2020-19294: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section...

PT-2021-10329

Name of the Vulnerable Software and Affected Versions: Jeesns version 1.4.2 Description: A stored cross-site scripting XSS issue in the "/member/picture/album" component allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the new album tab. Recommendations: For Jees...

PT-2021-10314

Name of the Vulnerable Software and Affected Versions: Dswjcms version 1.6.4 Description: A stored cross-site scripting XSS issue in the index.php/Dswjcms/Basis/links component allows attackers to execute arbitrary web scripts or HTML. This can lead to the execution of malicious code on the...

GNU-Mailman Integration <= 1.0.6 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the gmerror parameter found in the /includes/admin/mailing-lists-page.php file which allows attackers to inject arbitrary web scripts...

Konnichiwa! Membership <= 0.8.3 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the planid parameter in the /views/subscriptions.html.php file which allows attackers to inject arbitrary web scripts...

simpleSAMLphp Authentication <= 0.7.0 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /simplesamlphp-authentication.php file which allows attackers to inject arbitrary web scripts...

Twitter Friends Widget <= 3.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the pmcTFuser and pmcTFpassword parameter found in the /twitter-friends-widget.php file which allows attackers to inject arbitrary web scripts...

RentPress <= 6.6.4 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the selections parameter found in the /src/rentPress/AjaxRequests.php file which allows attackers to inject arbitrary web scripts...

Cross site scripting

The WordPress Real Media Library WordPress plugin is vulnerable to Stored Cross-Site Scripting via the name parameter in the /inc/overrides/lite/rest/Folder.php file which allows author-level attackers to inject arbitrary web scripts in folder names, in versions up to and including 4.14.1...

CVE-2020-18126

Multiple stored cross-site scripting XSS vulnerabilities in the Sections module of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML...

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in the Sections module of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-18125

A reflected cross-site scripting XSS vulnerability in the /plugin/ajax.php component of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-18126

Multiple stored cross-site scripting XSS vulnerabilities in the Sections module of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML...

PT-2021-10135

Name of the Vulnerable Software and Affected Versions: Indexhibit version 2.1.5 Description: A reflected cross-site scripting XSS issue in the "/plugin/ajax.php" component allows attackers to execute arbitrary web scripts or HTML. This can be exploited through the API endpoint "/plugin/ajax.php"...

CVE-2020-18126: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in the Sections module of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-18125: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the /plugin/ajax.php component of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML...