CVE-2024-27517

Webasyst 2.9.9 has a Cross-Site Scripting XSS vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions...

CVE-2024-29413

Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function...

CVE-2024-29413

Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function...

CVE-2024-29413

Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function...

Webasyst 跨站脚本漏洞

Webasyst is an open source PHP framework from Webasyst Inc. A cross-site scripting vulnerability exists in Webasyst version v.2.9.9 that could allow a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function...

CVE-2024-29413

A Cross-Site Scripting (XSS) vulnerability exists in the Webasyst v.2.9.9 open source PHP framework. A remote attacker can exploit the Instant messenger field within the Contact info function to execute arbitrary code . No specific remediation steps or exploit links are provided in the documents.

CVE-2024-27517

Webasyst 2.9.9 has a Cross-Site Scripting XSS vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions...

Cross site scripting

Webasyst 2.9.9 has a Cross-Site Scripting XSS vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions...

Webasyst Security Vulnerabilities

Webasyst is an open source PHP framework from Webasyst. A security vulnerability exists in Webasyst version 2.9.9. An attacker exploiting this vulnerability could create blogs containing malicious code after gaining blogging privileges...

CVE-2024-27517

Webasyst 2.9.9 has a Cross-Site Scripting XSS vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions...

PT-2024-21927 · Webasyst · Webasyst

Name of the Vulnerable Software and Affected Versions: Webasyst version 2.9.9 Description: The issue allows attackers to create blogs containing malicious code after gaining blog permissions, which can lead to a Cross-Site Scripting XSS attack. Recommendations: For Webasyst version 2.9.9, conside...

CVE-2024-27517

CVE-2024-27517 affects Webasyst 2.9.9 with a Cross-Site Scripting (XSS) vulnerability that allows attackers to insert malicious code in blogs after gaining blog permissions. Root cause details are not explicitly provided in the sources; impact is described as enabling creation of blogs containing...

CVE-2024-27517

Webasyst 2.9.9 has a Cross-Site Scripting XSS vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions...

CVE-2024-27517

Webasyst 2.9.9 has a Cross-Site Scripting XSS vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions...

webasyst.com XSS vulnerability

Vulnerable URL: https://www.webasyst.com/blog/?query=" Details: Description| Value ---|--- Patched:| Yes, at 17.10.2017 Latest check for patch:| 17.10.2017 11:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 237123 VIP website status:| No Check webasyst.com SS...

webasyst.ru XSS vulnerability

Vulnerable URL: https://www.webasyst.ru/blog/?query=" Details: Description| Value ---|--- Patched:| Yes, at 15.10.2017 Latest check for patch:| 15.10.2017 06:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 73774 VIP website status:| No Check webasyst.ru SSL...

CVE-2014-8377

Cross-site scripting XSS vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contacts/...

Cross site scripting

Cross-site scripting XSS vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contacts/...

CVE-2014-8377

The CVE-2014-8377 entry describes a Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933. The flaw allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contacts/. Impact is partial integrit...

CVE-2014-8377

Cross-site scripting XSS vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new contact to phpecom/index.php/webasyst/contacts/...