CVE-2021-20619: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in GROWI v4.2 Series versions prior to v4.2.3 allows remote attackers to inject an arbitrary script via unspecified vectors...

CVE-2020-5638

Cross-site scripting vulnerability in desknet's NEO desknet's NEO Small License V5.5 R1.5 and earlier, and desknet's NEO Enterprise License V5.5 R1.5 and earlier allows remote attackers to inject arbitrary script via unspecified vectors...

CVE-2020-5638

Cross-site scripting vulnerability in desknet's NEO desknet's NEO Small License V5.5 R1.5 and earlier, and desknet's NEO Enterprise License V5.5 R1.5 and earlier allows remote attackers to inject arbitrary script via unspecified vectors...

PT-2020-18605

Name of the Vulnerable Software and Affected Versions desknet's NEO versions 5.5 R1.5 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary script via unspecified vectors. Recommendations For desknet's NEO versions 5.5 R1.5 and earlier, at the moment,...

CVE-2020-5638: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in desknet's NEO desknet's NEO Small License V5.5 R1.5 and earlier, and desknet's NEO Enterprise License V5.5 R1.5 and earlier allows remote attackers to inject arbitrary script via unspecified vectors...

CVE-2020-5662

Reflected cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script via unspecified vectors...

CVE-2020-5663

Stored cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script via unspecified vectors...

CVE-2020-5650

Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors...

PT-2020-18617

Name of the Vulnerable Software and Affected Versions Simple Download Monitor versions 3.8.8 and earlier Description A cross-site scripting issue allows remote attackers to inject an arbitrary script via unspecified vectors. Recommendations For Simple Download Monitor versions 3.8.8 and earlier, ...

CVE-2020-7318

Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator ePO prior to 5.10.9 Update 9 allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized...

CVE-2020-25343

Cross-site scripting XSS vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields'body' param via events\event.publisharticle.php...

CVE-2020-5631

Stored cross-site scripting vulnerability in CMONOS.JP ver2.0.20191009 and earlier allows remote attackers to inject arbitrary script via unspecified vectors...

PT-2020-18599

Name of the Vulnerable Software and Affected Versions CMONOS.JP versions prior to 2.0.20191009 Description A stored cross-site scripting issue allows remote attackers to inject arbitrary script via unspecified vectors. Recommendations For versions prior to 2.0.20191009, update to a version later...

PT-2020-18579

Name of the Vulnerable Software and Affected Versions WHR-G54S firmware versions 1.43 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary script via a specially crafted page. Recommendations For WHR-G54S firmware versions 1.43 and earlier, update to a...

SymphonyCMS 3.0.0 - Persistent Cross-Site Scripting

Exploit Title: SymphonyCMS 3.0.0 - Persistent Cross-Site Scripting Google Dork: "lepton cms" Date: 2020-08-28 Exploit Author: SunCSR Sun Cyber Security Research Vendor Homepage: https://www.getsymphony.com/ Software Link: https://www.getsymphony.com/ Version: 3.0.0 Tested on: Windows CVE : N/A...

CVE-2020-5619

Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via unspecified vectors...

CVE-2020-5540

Cross-site scripting vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to inject arbitrary script or HTML via a specially crafted URL...

CVE-2020-5586

Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors...

CVE-2020-5585

Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspecified vectors...

PT-2020-18560

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.10.3 through 5.0.1 Description A cross-site scripting issue allows an attacker with administrator rights to inject an arbitrary script via unspecified vectors. Recommendations For Cybozu Garoon versions 4.10.3 through...