CVE-2017-6540

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data configs passed to the webpagetest-master/www/benchmarks/compare.php URL. An attacker could execute arbitrary HTML and script code in a browse...

CVE-2017-6539

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data benchmark, time passed to the webpagetest-master/www/benchmarks/delta.php URL. An attacker could execute arbitrary HTML and script code in a...

CVE-2017-6540

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data configs passed to the webpagetest-master/www/benchmarks/compare.php URL. An attacker could execute arbitrary HTML and script code in a browse...

CVE-2017-6541

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data benchmark, time passed to the webpagetest-master/www/benchmarks/viewtest.php URL. An attacker could execute arbitrary HTML and script code in...

CVE-2017-6536

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data url, pssid passed to the webpagetest-master/www/weblite.php URL. An attacker could execute arbitrary HTML and script code in a browser in the...

CVE-2017-6539

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data benchmark, time passed to the webpagetest-master/www/benchmarks/delta.php URL. An attacker could execute arbitrary HTML and script code in a...

CVE-2017-6541

CVE-2017-6541 concerns multiple XSS vulnerabilities in webpagetest 3.0. The issues arise from insufficient filtration of user-supplied data (benchmark, time) passed to the webpagetest-master/www/benchmarks/viewtest.php URL, allowing an attacker to execute arbitrary HTML and script code in a user’...

CVE-2017-6540

CVE-2017-6540 affects webpagetest 3.0, with XSS due to insufficient filtration of user-supplied data (configs) passed to webpagetest-master/www/benchmarks/compare.php. The vulnerability allows an attacker to cause arbitrary HTML/script execution in a victim’s browser in the context of the affecte...

CVE-2017-6537

CVE-2017-6537 affects webpagetest 3.0. The issue is an XSS vulnerability caused by insufficient filtration of user-supplied data (bgcolor) passed to webpagetest-master/www/video/view.php. An attacker could inject arbitrary HTML/script in the victim’s browser within the affected site context. Both...

CVE-2017-6534

CVE-2017-6534 affects webpagetest 3.0, where insufficient filtration of user-supplied data (pssid) passed to webpagetest-master/www/pss.php enables cross-site scripting. The impact is that an attacker could execute arbitrary HTML and script code in the context of the vulnerable website. The avail...

CVE-2017-6538

CVE-2017-6538 concerns an XSS vulnerability in webpagetest 3.0 where user-supplied data (video) passed to webpagetest-master/www/speedindex/index.php is not properly filtered, allowing an attacker to inject arbitrary HTML/JavaScript in the victim’s browser. The issue is triggered via insufficient...

CVE-2017-6533

CVE-2017-6533 concerns an XSS in webpagetest 3.0. The vulnerability arises from insufficient filtration of user-supplied data (benchmark) passed to webpagetest-master/www/benchmarks/view.php, allowing an attacker to inject HTML/script in the context of the vulnerable site. The documentation does ...

CVE-2017-6539

The CVE-2017-6539 entry pertains to multiple XSS vulnerabilities in webpagetest 3.0, caused by insufficient filtration of user-supplied data (benchmark, time) passed to webpagetest-master/www/benchmarks/delta.php. The vulnerability allows an attacker to execute arbitrary HTML and script code in t...

CVE-2017-6535

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data benchmark, url passed to the webpagetest-master/www/benchmarks/trendurl.php URL. An attacker could execute arbitrary HTML and script code in ...

CVE-2017-6534

A Cross-Site Scripting XSS issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data pssid passed to the webpagetest-master/www/pss.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the...

CVE-2017-6535

CVE-2017-6535 affects webpagetest 3.0. The vulnerability stems from insufficient filtration of user-supplied data (benchmark, url) passed to webpagetest-master/www/benchmarks/trendurl.php, enabling Cross-Site Scripting (XSS) where an attacker could execute arbitrary HTML/script in a victim's brow...

CVE-2017-6536

CVE-2017-6536 covers multiple XSS flaws in webpagetest 3.0 where user input in the URL and pssid passed to webpagetest-master/www/weblite.php is not properly filtered. This allows an attacker to inject and execute arbitrary HTML/JavaScript in the victim’s browser within the target website’s conte...

PT-2017-17139

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description A Cross-Site Scripting XSS issue exists due to insufficient filtration of user-supplied data, specifically the bgcolor variable, passed to the "webpagetest-master/www/video/view.php" URL. This allows an...

PT-2017-17143

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data, such as benchmark and time, passed to the "/webpagetest-master/www/benchmarks/viewtest.php" API...

CVE-2017-6396

An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerabl...