CVE-2020-35984

A stored cross site scripting XSS vulnerability in the 'Users Alerts' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Title' parameter...

CVE-2020-35987

A stored cross site scripting XSS vulnerability in the 'Entities List' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Name' parameter...

PT-2021-11195

Name of the Vulnerable Software and Affected Versions: Codoforum version 5.0.2 Description: A stored cross site scripting XSS issue in the 'Smileys' feature allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Smiley Code parameter...

PT-2021-11197

Name of the Vulnerable Software and Affected Versions: BlackCat CMS version 1.3.6 Description: A stored cross site scripting XSS issue in the 'Add Page' feature allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Title parameter...

Codoforum 跨站脚本漏洞

Codoforum is a set of PHP and MySQL based forum software. A cross-site scripting vulnerability exists in Codoforum version 5.0.2, which can be exploited by an authenticated attacker to execute arbitrary web script or HTML via a crafted payload with the "Manage Users" parameter...

PT-2021-11198

Name of the Vulnerable Software and Affected Versions: BlackCat CMS version 1.3.6 Description: A stored cross site scripting XSS issue in the 'Admin-Tools' feature allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads entered into the Output Filters and...

PT-2021-11133

Name of the Vulnerable Software and Affected Versions: CSZ CMS version 1.2.9 Description: A cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the New Pages field under the Pages Content module. Recommendations: For CSZ CMS...

PT-2021-11135

Name of the Vulnerable Software and Affected Versions: moziloCMS version 2.0 Description: A stored cross site scripting XSS issue allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Content parameter. Recommendations: For moziloCMS versio...

PT-2021-11196

Name of the Vulnerable Software and Affected Versions: Codoforum version 5.0.2 Description: A stored cross site scripting XSS issue in the 'Pages' feature allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Page Title parameter...

PT-2021-11134

Name of the Vulnerable Software and Affected Versions: CSZ CMS version 1.2.9 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the New Article field under the Article plugin. This enables attackers to...

CVE-2020-25391: Improper Neutralization of Input During Web Page Generation

A cross site scripting vulnerability in CSZ CMS 1.2.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'New Pages' field under the 'Pages Content' module...

CVE-2020-20584

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/...

CVE-2020-20584

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/...

CVE-2020-20584: Improper Neutralization of Input During Web Page Generation

A cross site scripting vulnerability in baigo CMS v4.0-beta-1 allows attackers to execute arbitrary web scripts or HTML via the form parameter post to /public/console/profile/info-submit/...

CVE-2021-34625

A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and prior...

Design/Logic Flaw

A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and prior...

CVE-2021-34625: Improper Neutralization of Input During Web Page Generation

A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and prior...

Cross site scripting

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Name" or "Prefix" fields under the "Create New Rate" module...

CVE-2021-34190: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Name" or "Prefix" fields under the "Create New Rate" module...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2021-48497)

CMS Made Simple CMSMS is an open source content management system that provides developers, programmers, and website owners with a web-based version of the development and management interface. A stored cross-site scripting vulnerability exists in CMS Made Simple version 2.2.14, which can be...