23 matches found
CVE-2019-16890
Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...
EUVD-2019-7389
Malware in sbrugna...
SUSE CVE-2012-0220
Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...
Cross-Site Scripting (XSS)
mautic/core is vulnerable to stored cross-site scripting. An attacker is able to inject arbitrary Javascript on a user's browser via the authorUrl parameter...
CVE-2019-16890
Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...
CVE-2019-16890
Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...
Hardcoded credentials
Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...
CVE-2019-16890
Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...
CVE-2019-16890
Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...
PT-2019-14847
Name of the Vulnerable Software and Affected Versions Halo version 1.1.0 Description The issue allows for XSS via a crafted authorUrl in JSON data to the "api/content/posts/comments" API endpoint. Recommendations For Halo version 1.1.0, avoid using the authorUrl variable in the...
CVE-2019-16890: Improper Neutralization of Input During Web Page Generation
Halo 1.1.0 has XSS via a crafted authorUrl in JSON data to api/content/posts/comments...
CVE-2018-11198
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json...
Design/Logic Flaw
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json...
CVE-2018-11198
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json...
CVE-2018-11198: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json...
PT-2019-8777
Name of the Vulnerable Software and Affected Versions Mautic version 2.13.1 Description An issue was discovered in Mautic where there is Stored XSS via the authorUrl field in config.json. This affects the Author URL of themes. Recommendations For Mautic version 2.13.1, update to version 2.14 or...
CVE-2012-0220
Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...
CVE-2012-0220
Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...
DEBIAN-CVE-2012-0220
Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the meta plugin Plugin/meta.pm in ikiwiki before 3.20120516 allow remote attackers to inject arbitrary web script or HTML via the 1 author or 2 authorurl meta tags...