CVE-2021-46253

A cross-site scripting XSS vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbitrary web scripts or HTML...

Cross site scripting

A cross-site scripting XSS vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbitrary web scripts or HTML...

CVE-2021-46253

A cross-site scripting XSS vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbitrary web scripts or HTML...

CVE-2021-46253

Anchor CMS v0.12.7 contains a cross-site scripting (XSS) vulnerability in the Create Post function that can allow an attacker to execute arbitrary web scripts or HTML in a victim’s browser. The CVE entry CVE-2021-46253 documents this issue with a low-to-medium overall risk depending on context, b...

Anchor 跨站脚本漏洞

Anchor is an open source lightweight blogging system. A cross-site scripting vulnerability exists in Anchor CMS v0.12.7, which allows an attacker to exploit the vulnerability to execute arbitrary web script or HTML...

Missing Re-entrancy Guard

Handle defsec Vulnerability details Impact The re-entrancy guard is missing on the Eth anchor interaction. The external router interaction can cause to the re-entrancy vulnerability. Proof of Concept 1. Navigate to the following contract. function finishDepositStableuint256 idx external...

Cross-site Scripting in Anchor CMS

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

GHSA-7MQ6-CP5M-F4J5 Cross-site Scripting in Anchor CMS

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

Anchor Cross-Site Scripting Vulnerability (CNVD-2021-103514)

Anchor is an open source lightweight blogging system. Anchor is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to upload headers and content containing malicious code via the post bar...

CVE-2021-44116

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

CVE-2021-44116

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

CVE-2021-44116

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

Cross site scripting

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

CVE-2021-44116

CVE-2021-44116 (Anchor CMS) : The vulnerability is an XSS in Anchor CMS versions ≤ 0.12.7, residing in posts.php. The root cause is improper sanitization/neutralization of input in the posts column, allowing an attacker to inject malicious code via the title/content fields. This can enable an att...

CVE-2021-44116

Cross Site Scripting XSS vulnerability exits in Anchor CMS =0.12.7 in posts.php. Attackers can use the posts column to upload the title and content containing malicious code to achieve the purpose of obtaining the administrator cookie, thereby achieving other malicious operations...

Anchor 跨站脚本漏洞

Anchor is an open source lightweight blogging system. Anchor is vulnerable to a cross-site scripting vulnerability that could be exploited by attackers to upload headers and content containing malicious code via the post bar...

CVE-2021-38377

OX App Suite through 7.10.5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail, because there is a predictable UUID with HTML transformation results...

OX App Suite 7.10.5 Cross Site Scripting / Information Disclosure Vulnerability

OX App Suite versions 7.10.5 and below suffer from cross site scripting and information disclosure vulnerabilities. Product: OX App Suite Vendor: OX Software GmbH Internal reference: OXUIB-872 Vulnerability type: Cross-Site Scripting CWE-80 Vulnerable version: 7.10.5 and earlier Vulnerable...

Mozilla Firefox Security Advisory (MFSA2015-40) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...