CASAP Automated Enrollment 跨站脚本漏洞

CASAP Automated Enrollment is an automated enrollment system from the CASAP organization. The goal of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easily retrievable. SourceCodester CASAP Automated...

CVE-2020-22150

A cross site scripting XSS vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-22148

A stored cross site scripting XSS vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

Cross site scripting

A cross site scripting XSS vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-22150

A cross site scripting XSS vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-22150

A cross site scripting XSS vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-22148

A stored cross site scripting XSS vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-22148

A stored cross site scripting XSS vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

NewsPlugin < 1.1.0 - CSRF to Stored Cross-Site Scripting

The NewsPlugin WordPress plugin is vulnerable to Cross-Site Request Forgery via the handlesavestyle function found in the /news-plugin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.18. Note: v1.1.0 Added CSRF to the affected function, but see...

PT-2021-10728

Name of the Vulnerable Software and Affected Versions Piwigo version 2.10.1 Description A stored cross site scripting XSS issue in the "/admin.php?page=tags" endpoint allows attackers to execute arbitrary web scripts or HTML. This could potentially lead to unauthorized actions on the affected...

CVE-2020-22150: Improper Neutralization of Input During Web Page Generation

A cross site scripting XSS vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

PT-2021-10729

Name of the Vulnerable Software and Affected Versions Piwigo version 2.10.1 Description A cross site scripting XSS issue in the "/admin.php?page=permalinks" endpoint of Piwigo allows attackers to execute arbitrary web scripts or HTML. This could potentially lead to unauthorized actions on the...

CVE-2020-22148: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

Centreon Cross-Site Scripting Vulnerability (CNVD-2021-53336)

Centreon Merethis Centreon is a set of open source system monitoring tools from Centreon France. A cross-site scripting vulnerability exists in Centreon Platform version 20.10.0, which can be exploited by remote authenticated attackers to inject arbitrary Web scripts or HTML via alias parameters...

CVE-2021-3279

sz.chat version 4 allows injection of web scripts and HTML in the message box...

Code injection

sz.chat version 4 allows injection of web scripts and HTML in the message box...

CVE-2021-3279

sz.chat version 4 allows injection of web scripts and HTML in the message box...

CVE-2021-3279

The CVE-2021-3279 entry concerns sz.chat v4, where the message box allows injection of web scripts and HTML. Connected sources (Red Hat, CNVD, CVE listings, CNNVD, PRION) confirm the affected product and issue but do not provide a detailed root cause, exploited vectors, or a remediation. The vuln...

CVE-2020-29146

A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...

Cross site scripting

A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...