Lucene search
+L

3710 matches found

NVD
NVD
added 2023/05/01 4:15 p.m.17 views

CVE-2023-29639

Cross site scripting XSS vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via editing an article in the "blog article" page due to the default configuration not utilizing MyBlogUtils.cleanString...

5.4CVSS5.4AI score0.00364EPSS
SaveExploits1References1
NVD
NVD
added 2023/05/01 4:15 p.m.24 views

CVE-2023-29637

Cross Site Scripting XSS vulnerability in Qbian61 forum-java, allows attackers to inject arbitrary web script or HTML via editing the article content in the "article editor" page...

6.1CVSS5.9AI score0.00363EPSS
SaveExploits1References1
Prion
Prion
added 2023/05/01 4:15 p.m.28 views

Cross site scripting

Cross Site Scripting XSS vulnerability in Qbian61 forum-java, allows attackers to inject arbitrary web script or HTML via editing the article content in the "article editor" page...

5.8CVSS5.9AI score0.00363EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/05/01 12:0 a.m.8 views

CVE-2023-29637

Cross Site Scripting XSS vulnerability in Qbian61 forum-java, allows attackers to inject arbitrary web script or HTML via editing the article content in the "article editor" page...

5.9AI score0.00363EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/05/01 12:0 a.m.23 views

CVE-2023-29639

Cross site scripting XSS vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via editing an article in the "blog article" page due to the default configuration not utilizing MyBlogUtils.cleanString...

5.5AI score0.00364EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/05/01 12:0 a.m.8 views

PT-2023-22346 · Unknown · Qbian61 Forum-Java

Name of the Vulnerable Software and Affected Versions: Qbian61 forum-java affected versions not specified Description: The issue allows attackers to inject arbitrary web script or HTML via editing the article content in the "article editor" page. This is a Cross Site Scripting XSS vulnerability...

6.1CVSS5.9AI score0.00363EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/05/01 12:0 a.m.5 views

PT-2023-22347 · Winterchens · My-Site

Name of the Vulnerable Software and Affected Versions: WinterChenS my-site versions before commit 3f0423da6d5200c7a46e200da145c1f54ee18548 Description: The issue allows attackers to inject arbitrary web script or HTML via editing blog articles, which is a Cross Site Scripting XSS vulnerability...

5.4CVSS6.2AI score0.00364EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2023/05/01 12:0 a.m.13 views

CVE-2023-29639

Cross site scripting XSS vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via editing an article in the "blog article" page due to the default configuration not utilizing MyBlogUtils.cleanString...

5.4AI score0.00364EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/05/01 12:0 a.m.38 views

CVE-2023-29637

Cross Site Scripting XSS vulnerability in Qbian61 forum-java, allows attackers to inject arbitrary web script or HTML via editing the article content in the "article editor" page...

6AI score0.00363EPSS
SaveExploits1References1
Prion
Prion
added 2023/04/27 3:15 p.m.23 views

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

4.9CVSS5.3AI score0.00419EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/04/27 12:0 a.m.10 views

Emlog 跨站脚本漏洞

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A cross-site scripting vulnerability exists in Emlog Pro v2.0.3. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary We...

5.4CVSS6.2AI score0.00419EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/04/27 12:0 a.m.11 views

PT-2023-22642 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.0.3 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters. This enables the execution of malicious scripts,...

5.4CVSS7.4AI score0.00419EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2023/04/27 12:0 a.m.29 views

CVE-2023-30338

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

5.6AI score0.00419EPSS
SaveExploits1References1
OSV
OSV
added 2023/04/27 12:0 a.m.23 views

CVE-2023-30338

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

5.4CVSS5.9AI score
SaveExploits0References3
OSV
OSV
added 2023/04/20 8:15 p.m.7 views

CVE-2023-27090

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter...

5.4CVSS6AI score0.00427EPSS
SaveExploits1References2
NVD
NVD
added 2023/04/20 8:15 p.m.30 views

CVE-2023-27090

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter...

5.4CVSS5.2AI score0.00427EPSS
SaveExploits1References2
Prion
Prion
added 2023/04/20 8:15 p.m.20 views

Cross site scripting

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter...

4.9CVSS5.3AI score0.00427EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/20 12:0 a.m.5 views

CVE-2023-27090

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter...

5.3AI score0.00427EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2023/04/14 12:0 a.m.43 views

WordPress Article Directory Redux Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Article Directory Redux Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30751 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1d10759d477b Credits Pavitra Tiwari...

5.9CVSS6AI score0.00369EPSS
SaveExploits0References1Affected Software1
Microsoft Security Update
Microsoft Security Update
added 2023/04/11 5:0 p.m.24 views

2023-04 Dynamic Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5025221)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

6.4AI score
SaveExploits0
Rows per page
Query Builder