CVE-2017-6541

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data benchmark, time passed to the webpagetest-master/www/benchmarks/viewtest.php URL. An attacker could execute arbitrary HTML and script code in...

CVE-2017-6539

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data benchmark, time passed to the webpagetest-master/www/benchmarks/delta.php URL. An attacker could execute arbitrary HTML and script code in a...

CVE-2017-6534

CVE-2017-6534 affects webpagetest 3.0, where insufficient filtration of user-supplied data (pssid) passed to webpagetest-master/www/pss.php enables cross-site scripting. The impact is that an attacker could execute arbitrary HTML and script code in the context of the vulnerable website. The avail...

CVE-2017-6539

The CVE-2017-6539 entry pertains to multiple XSS vulnerabilities in webpagetest 3.0, caused by insufficient filtration of user-supplied data (benchmark, time) passed to webpagetest-master/www/benchmarks/delta.php. The vulnerability allows an attacker to execute arbitrary HTML and script code in t...

CVE-2017-6535

CVE-2017-6535 affects webpagetest 3.0. The vulnerability stems from insufficient filtration of user-supplied data (benchmark, url) passed to webpagetest-master/www/benchmarks/trendurl.php, enabling Cross-Site Scripting (XSS) where an attacker could execute arbitrary HTML/script in a victim's brow...

CVE-2017-6541

CVE-2017-6541 concerns multiple XSS vulnerabilities in webpagetest 3.0. The issues arise from insufficient filtration of user-supplied data (benchmark, time) passed to the webpagetest-master/www/benchmarks/viewtest.php URL, allowing an attacker to execute arbitrary HTML and script code in a user’...

CVE-2017-6535

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data benchmark, url passed to the webpagetest-master/www/benchmarks/trendurl.php URL. An attacker could execute arbitrary HTML and script code in ...

CVE-2017-6536

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data url, pssid passed to the webpagetest-master/www/weblite.php URL. An attacker could execute arbitrary HTML and script code in a browser in the...

CVE-2017-6536

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data url, pssid passed to the webpagetest-master/www/weblite.php URL. An attacker could execute arbitrary HTML and script code in a browser in the...

CVE-2017-6537

CVE-2017-6537 affects webpagetest 3.0. The issue is an XSS vulnerability caused by insufficient filtration of user-supplied data (bgcolor) passed to webpagetest-master/www/video/view.php. An attacker could inject arbitrary HTML/script in the victim’s browser within the affected site context. Both...

CVE-2017-6533

CVE-2017-6533 concerns an XSS in webpagetest 3.0. The vulnerability arises from insufficient filtration of user-supplied data (benchmark) passed to webpagetest-master/www/benchmarks/view.php, allowing an attacker to inject HTML/script in the context of the vulnerable site. The documentation does ...

CVE-2017-6533

A Cross-Site Scripting XSS issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data benchmark passed to the webpagetest-master/www/benchmarks/view.php URL. An attacker could execute arbitrary HTML and script code in a browser in the...

CVE-2017-6541: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data benchmark, time passed to the webpagetest-master/www/benchmarks/viewtest.php URL. An attacker could execute arbitrary HTML and script code in...

CVE-2017-6540: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data configs passed to the webpagetest-master/www/benchmarks/compare.php URL. An attacker could execute arbitrary HTML and script code in a browse...

PT-2017-17136

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description A Cross-Site Scripting XSS issue exists due to insufficient filtration of user-supplied data pssid passed to the "webpagetest-master/www/pss.php" URL. This allows an attacker to execute arbitrary HTML and...

PT-2017-17142

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/benchmarks/compare.php" URL. An attacker could execute...

CVE-2017-6534: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data pssid passed to the webpagetest-master/www/pss.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the...

PT-2017-17138

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data, such as url and pssid, passed to the "/webpagetest-master/www/weblite.php" API endpoint. This...

PT-2017-17137

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data, such as benchmark and url, passed to the "webpagetest-master/www/benchmarks/trendurl.php" URL...

CVE-2017-6535: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data benchmark, url passed to the webpagetest-master/www/benchmarks/trendurl.php URL. An attacker could execute arbitrary HTML and script code in ...