12 matches found
Cross-site Scripting (XSS)
Overview pycti is a Python API client for OpenCTI. Affected versions of this package are vulnerable to Cross-site Scripting XSS because the content of the body field isn't appropriately sanitized when being rendered. The vulnerability does require user interaction but could be exploited by someon...
httpgrep 2.7
httpgrep is a tool written in Python that scans for HTTP servers and finds given strings in HTTP body and HTTP response headers...
CVE-2015-7609
Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra...
CVE-2023-6953
The PDF Generator For Fluent Forms – The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the header, PDF body and footer content parameters in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes ...
IBOS cross-site scripting vulnerabilities
IBOS is a collaborative office management system. A cross-site scripting vulnerability exists in ibos IBOS, which stems from a cross-site scripting XSS vulnerability in the content parameter of the body of an email in IBOS version 4.5.4...
Code injection
Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra...
CVE-2015-7609
Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra...
CVE-2015-7609: Improper Neutralization of Input During Web Page Generation
Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbra...
PT-2019-7208
Name of the Vulnerable Software and Affected Versions Synacor Zimbra Mail Client version 8.6 before 8.6.0 Patch 5 Description The issue concerns a problem with the error/warning dialog and email body content in Zimbra, allowing for XSS. Recommendations For Synacor Zimbra Mail Client version 8.6...
CVE-2018-5216
Radiant CMS 1.1.4 has XSS via crafted Markdown input in the partbodycontent parameter to an admin/pages//edit resource...
PT-2018-16808
Name of the Vulnerable Software and Affected Versions Radiant CMS version 1.1.4 Description The issue concerns crafted Markdown input that leads to XSS in the part body content parameter of the "admin/pages//edit" resource. Recommendations For Radiant CMS version 1.1.4, avoid using the part body...
