Cross-site Scripting

dolibarr is vulnerable to cross-site scripting attacks. The attack exists because it does not correctly filter the "url" field through the external calendar or 2 the bank name field in the "import external calendar" page, allowing the attacker to inject arbitrary script through them...

CVE-2017-12248

A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation...

WordPress Cross-Site Scripting Vulnerability (CNVD-2017-34852)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a cross-site scripting vulnerability in oEmbed Discovery. A remote attacker can exploit this...

Kaltura Cross-Site Scripting Vulnerability

Kaltura is a set of open source online video platform from Kaltura, Inc. in the United States. A cross-site scripting vulnerability exists in versions of Kaltura prior to 13.2.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

WordPress < 4.8.2 Multiple Vulnerabilities

According to its self-reported version number, the WordPress application running on the remote web server is prior to 4.8.2. It is, therefore, affected by multiple vulnerabilities : - A flaw in $wpdb-prepare can create unsafe queries leading to potential SQL injection flaws with plugins and theme...

Wordpress plugin image-gallery-with-slideshow cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Wordpress plugin image-gallery-with-slideshow cross-site scripting vulnerability. A remote attacker can exploit this...

Cross-site Scripting (XSS)

concrete5 is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script through the page search column.value parameter in concrete/elements/pages/search.php...

WordPress Shibboleth Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language, which supports the hosting of personal blog sites on servers running PHP and MySQL.The Shibboleth plugin is one of the plugins used to integrate Wordpress sites into existing identity...

Cisco Firepower Management Center Multiple XSS

The version of Cisco Firepower Management Center installed on the remote host is equal or prior to 6.0.1.3. It is, therefore, affected by multiple cross-site scripting vulnerabilities: - A reflected cross-site scripting vulnerability in the web-based management interface due to improper validatio...

Concrete5 cross-site scripting vulnerability (CNVD-2017-32458)

concrete5 is a free content management system CMS. The system can be edited and typeset directly on the page. A cross-site scripting vulnerability exists in concrete5 version 5.7.3.1, which stems from the program failing to validate or encrypt user-submitted input. A remote attacker can exploit...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

CVE-2017-12212

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...

CVE-2017-12220

A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpThumb before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php...

vBulletin Forum 'forum/help' Page XSS Vulnerability

vBulletin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cross-Site Scripting in PAN-OS

A vulnerability exists in PAN-OS’s GlobalProtect internal and external gateway interface. This issue could allow for a cross-site scripting XSS attack. PAN-OS does not properly validate specific request parameters. Ref PAN-76003 / CVE-2017-12416 Successful exploitation of this issue may allow an...

BMC Footprints Service Core Cross-Site Scripting Vulnerability

BMC Footprints Service Core is a suite of IT service and asset automation management platforms from BMC Software, USA. A cross-site scripting vulnerability exists in BMC Footprints Service Core version 11.5. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2017-10837

Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-10838

Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

Smartwebsites SmartCMS Cross-Site Scripting Vulnerability

Smartwebsites SmartCMS is a Content Management System CMS from Smartwebsites Cyprus. The system provides online content management, user management and document management. A cross-site scripting vulnerability exists in Smartwebsites SmartCMS version 2. A remote attacker can exploit this...