CVE-2022-0181

Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2022-0182: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote authenticated attacker to inject an arbitrary script via an website that uses Quiz And Survey Master...

PT-2021-14301

Name of the Vulnerable Software and Affected Versions: ELECOM LAN router WRC-2533GHBK-I versions 1.20 and prior Description: A cross-site scripting issue allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Recommendations: For ELECOM LAN router...

CVE-2021-20840: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20800

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

PT-2021-14259

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.7 through 3.1.9 Description: A cross-site scripting issue exists in the management screen, allowing a remote authenticated attacker to inject an arbitrary script. Recommendations: For Cybozu Remote Service...

PT-2021-14261

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.0.0 through 3.1.9 Description: A cross-site scripting issue exists in the management screen, allowing a remote attacker to inject an arbitrary script. Recommendations: For Cybozu Remote Service versions 3.0.0...

CVE-2021-20800: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-41467

Cross-site scripting XSS vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter...

CVE-2021-20828: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Order Status Batch Change Plug-in for EC-CUBE 3.0 series all versions allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20825: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in List order management item change plug-in for EC-CUBE 3.0 series Ver.1.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-38331

The WP-T-Wap WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the posted parameter found in the /wap/writer.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.13.2...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

CVE-2021-20812

Cross-site scripting vulnerability in Setting screen of Server Sync of Movable Type Movable Type Advanced 7 r.4903 and earlier Movable Type Advanced 7 Series and Movable Type Premium Advanced 1.44 and earlier allows remote attackers to inject arbitrary script or HTML via unspecified vectors...

CVE-2021-20811

Cross-site scripting vulnerability in List of Assets screen of Movable Type Movable Type 7 r.4903 and earlier Movable Type 7 Series, Movable Type 6.8.0 and earlier Movable Type 6 Series, Movable Type Advanced 7 r.4903 and earlier Movable Type Advanced 7 Series, Movable Type Premium 1.44 and...

PT-2021-14265

Name of the Vulnerable Software and Affected Versions: Movable Type versions 7 r.4903 and earlier Movable Type 6 versions 6.8.0 and earlier Movable Type Advanced versions 7 r.4903 and earlier Movable Type Premium version 1.44 and earlier Movable Type Premium Advanced version 1.44 and earlier...

CVE-2021-20766

Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20770

Cross-site scripting vulnerability in Message of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

PT-2021-14208

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.0.2 Description: A cross-site scripting issue in the Scheduler component allows a remote authenticated attacker to inject an arbitrary script. Recommendations: For Cybozu Garoon versions 4.0.0 through...

PT-2021-14221

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.0.2 Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary script via unspecified vectors. Recommendations: For versions 4.0.0 through 5.0.2, update to a version outsid...