PT-2024-4464

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.20 and earlier Description The issue is a DOM-based Cross-Site Scripting XSS vulnerability that could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...

PT-2024-4493

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.20 and earlier Description The issue exists due to inadequate protection of the web page structure in Adobe Experience Manager. This could allow a remote attacker to execute arbitrary code. The vulnerabili...

PT-2024-4216

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.20 and earlier Description The issue is related to insufficient protection of the web page structure, allowing an attacker to execute arbitrary JavaScript code in the context of the victim's browser sessio...

PT-2024-4714

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to a lack of protection of the web page structure in Adobe Experience Manager, which could allow a remote attacker to conduct a cross-site scripting attack...

PT-2024-4942

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to a DOM-based Cross-Site Scripting XSS vulnerability. This could allow an attacker to execute arbitrary JavaScript code in the context of the victim's...

PT-2024-4705

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to a DOM-based Cross-Site Scripting XSS vulnerability. This could allow an attacker to execute arbitrary JavaScript code in the context of the victim's...

PT-2024-4495

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.20 and earlier Description The issue is a DOM-based Cross-Site Scripting XSS vulnerability that could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...

PT-2024-4217

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.20 and earlier Description The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious...

PT-2024-4620

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to a DOM-based Cross-Site Scripting XSS vulnerability. This could allow an attacker to execute arbitrary JavaScript code in the context of the victim's...

PT-2024-4491

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.20 and earlier Description The issue is a DOM-based Cross-Site Scripting XSS vulnerability that could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...

PT-2024-4488

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.20 and earlier Description The issue is a DOM-based Cross-Site Scripting XSS vulnerability that could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session...

PT-2024-4440

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.20 and earlier Description The issue is related to insufficient protection of the web page structure, allowing an attacker to execute arbitrary JavaScript code in the context of the victim's browser sessio...

PT-2024-4438

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.20 and earlier Description The issue is related to insufficient protection of the web page structure, which could allow a remote attacker to execute arbitrary code. This is a DOM-based Cross-Site Scripting...

PT-2024-4711

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to a DOM-based Cross-Site Scripting XSS vulnerability. This could allow an attacker to execute arbitrary JavaScript code in the context of the victim's...

PT-2024-4463

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.20 and earlier Description The issue exists due to inadequate protection of the web page structure in Adobe Experience Manager. Exploitation of this issue could allow a remote attacker to execute arbitrary...

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

CVE-2024-3402 Stored XSS vulnerability in gaizhenbiao/chuanhuchatgpt

A stored Cross-Site Scripting XSS vulnerability existed in version 20240121 of gaizhenbiao/chuanhuchatgpt due to inadequate sanitization and validation of model output data. Despite user-input validation efforts, the application fails to properly sanitize or validate the output from the model,...

CVE-2024-3166

Summary: CVE-2024-3166 affects mintplex-labs/anything-llm, including desktop v1.2.0 to v1.4.1 and the web app. The vulnerability is an XSS in the feature that fetches and embeds external website content into workspaces, with a route to Remote Code Execution in the desktop app due to Electron sett...

CVE-2024-3166 Cross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llm

A Cross-Site Scripting XSS vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop application version 1.2.0 and the latest version of the web application. The vulnerability arises from the application's feature to fetch and embed content from websites into workspaces, whic...