PT-2026-91732

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their given name and surname to include malicious JavaScript code. When an administrator later accesses the user account management panel and views that user's permissions, the...

CVE-2022-35933 PrestaShop module Product Comments vulnerable to cross-site scripting (XSS)

This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where the attacker could steal an administrator's cookie. The issue is fixed in version 5.0.2...

Stored cross-site scripting vulnerability in ZZCMS as***.php page

ZZCMS is a free website builder developed in asp language. A stored cross-site scripting vulnerability exists in the ZZCMS as.php page. An attacker can exploit the vulnerability to obtain a background administrator cookie...

iWebShop open source mall system has xss vulnerability

iWebShop is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source mall system . iWebShop has an xss vulnerability that can be exploited by attackers to obtain an administrator cookie...

CVE-2018-12429: Improper Neutralization of Input During Web Page Generation

JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie...

Dimensions buy the system stored XSS can be comfortably background-vulnerability warning-the black bar safety net

fanwe buy the system thereXSScan obtain an administrator cookie and into the background First, in a goods to go in, inside there will be a refund of the message, will be there even if paid. Then comments can be addedXSS, the administrator every day view, the view will obtain administrator COOkie...