CVE-2023-42250: Improper Neutralization of Input During Web Page Generation

Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via /common/autocomplete.php...

PT-2014-8312

Name of the Vulnerable Software and Affected Versions Moodle versions 2.4.0 through 2.4.11 Moodle versions 2.5.x before 2.5.9 Moodle versions 2.6.x before 2.6.6 Moodle versions 2.7.x before 2.7.3 Description The issue allows remote authenticated users to bypass intended access restrictions. This ...

PT-2012-5813

Name of the Vulnerable Software and Affected Versions Fork CMS versions prior to 3.2.7 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the term parameter to several API endpoints, including "autocomplete.php",...