CVE-2021-20734

Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML via unspecified vectors...

PT-2021-14197

Name of the Vulnerable Software and Affected Versions: EC-CUBE Business form output plugin versions prior to 1.0.1 Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary script via an unspecified vector. This could potentially lead to unauthorized actions on the...

PT-2021-14199

Name of the Vulnerable Software and Affected Versions: EC-CUBE Category contents plugin for EC-CUBE 3.0 series versions prior to 1.0.1 Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page...

PT-2021-14198

Name of the Vulnerable Software and Affected Versions: EC-CUBE Email newsletters management plugin for EC-CUBE 3.0 series versions prior to 1.0.4 Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary script by leading a user to a specially crafted page and to...

CVE-2021-20742: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in EC-CUBE Business form output plugin for EC-CUBE 3.0 series versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script via unspecified vector...

GHSA-RCP4-JM2V-MR3F Cross-site scripting in Shopizer

A stored cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customername in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when informati...

GHSA-24P5-X9F9-VVPX Cross-site Scripting (XSS) in baserCMS

Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...

YzmCMS 跨站脚本漏洞

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. YzmCMS 5.8 version of the /admin/systemmanage/userconfigedit.html page there is a cross-site scripting vulnerability, an attacker can use the vulnerability to inject...

Mozilla Firefox 跨站脚本漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A cross-site scripting vulnerability exists in Firefox 3.6.24 and versions between 4.x and 7. An attacker can exploit this vulnerability to inject arbitrary web script or HTML to execute client-side co...

CVE-2020-26642

A cross-site scripting XSS vulnerability has been discovered in the login page of SeaCMS version 11 which allows an attacker to inject arbitrary web script or HTML...

CVE-2021-20725

Reflected cross-site scripting vulnerability in the admin page of Calendar01 free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20724: Improper Neutralization of Input During Web Page Generation

Reflected cross-site scripting vulnerability in the admin page of Telop01 free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-32103

A Stored XSS vulnerability in interface/usergroup/usergroupadmin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter...

CVE-2021-20680

Cross-site scripting vulnerability in NEC Aterm devices Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier,...

PT-2021-14139

Name of the Vulnerable Software and Affected Versions: NEC Aterm WG1900HP2 versions 1.3.1 and earlier NEC Aterm WG1900HP versions 2.5.1 and earlier NEC Aterm WG1800HP4 versions 1.3.1 and earlier NEC Aterm WG1800HP3 versions 1.5.1 and earlier NEC Aterm WG1200HS2 versions 2.5.0 and earlier NEC Ater...

PT-2021-14169

Name of the Vulnerable Software and Affected Versions: Aterm WG2600HS firmware versions prior to Ver1.5.1 Description: A cross-site scripting issue allows remote attackers to inject an arbitrary script via unspecified vectors. Recommendations: For Aterm WG2600HS firmware versions prior to Ver1.5....

PT-2021-14148

Name of the Vulnerable Software and Affected Versions: Yomi-Search version 4.22 Description: A cross-site scripting issue allows remote attackers to inject an arbitrary script via unspecified vectors. Recommendations: For Yomi-Search version 4.22, at the moment, there is no information about a...

PT-2021-14147

Name of the Vulnerable Software and Affected Versions: Click Ranker version 3.5 Description: A cross-site scripting issue allows remote attackers to inject an arbitrary script via unspecified vectors. Recommendations: For Click Ranker version 3.5, update to a version that addresses this issue, as...

CVE-2021-20688: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Click Ranker Ver.3.5 allows remote attackers to inject an arbitrary script via unspecified vectors...

Mblog Cross-Site Scripting Vulnerability (CNVD-2021-26163)

Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5 has a cross-site scripting vulnerability , the vulnerability stems from post editing via the post content field . An attacker can use this vulnerability to inject arbitrary Web script or HT...