71 matches found
PT-2022-9658
Name of the Vulnerable Software and Affected Versions Translate WordPress with GTranslate WordPress plugin versions prior to 2.9.7 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the body parameter in the url addon/gtranslate-email.php file is not...
CVE-2020-35854
Textpattern 4.8.4 is affected by cross-site scripting XSS in the Body parameter...
CVE-2020-35854
Textpattern 4.8.4 is affected by cross-site scripting XSS in the Body parameter...
Cross site scripting
Textpattern 4.8.4 is affected by cross-site scripting XSS in the Body parameter...
Textpattern Cross-Site Script Vulnerabilities
Textpattern is a free open source content management system based on PHP and MySQL. A cross-site scripting vulnerability exists in the Body parameter in Textpattern 4.8.4. No detailed vulnerability details are provided at this time...
CVE-2020-35854: Improper Neutralization of Input During Web Page Generation
Textpattern 4.8.4 is affected by cross-site scripting XSS in the Body parameter...
CVE-2020-35854
Textpattern 4.8.4 (Textpattern CMS, PHP/MySQL) is affected by cross-site scripting (XSS) in the Body parameter. The connected data identifies the vulnerable component as the Body parameter handling but does not provide a root cause description beyond noting an XSS issue, nor any explicit exploita...
CVE-2020-35854
Textpattern 4.8.4 is affected by cross-site scripting XSS in the Body parameter...
PT-2021-11863
Name of the Vulnerable Software and Affected Versions: Textpattern version 4.8.4 Description: The issue is related to cross-site scripting XSS in the Body parameter. This means an attacker could potentially inject malicious scripts into the website, affecting user sessions. Recommendations: For...
CVE-2012-1001: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Chyrp before 2.1.2 and before 2.5 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 content parameter to includes/ajax.php or 2 body parameter to includes/error.php...
CVE-2019-14350
EspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the Knowledge base. A malicious attacker can inject JavaScript code in the body parameter during api/v1/KnowledgeBaseArticle knowledge-base record creation...
PT-2019-13629
Name of the Vulnerable Software and Affected Versions EspoCRM version 5.6.4 Description The issue is related to stored XSS due to the lack of filtration of user-supplied data in the Knowledge base. A malicious attacker can inject JavaScript code in the body parameter during the...
CVE-2019-14350: Improper Neutralization of Input During Web Page Generation
EspoCRM 5.6.4 is vulnerable to stored XSS due to lack of filtration of user-supplied data in the Knowledge base. A malicious attacker can inject JavaScript code in the body parameter during api/v1/KnowledgeBaseArticle knowledge-base record creation...
CVE-2018-13137
The Events Manager plugin 5.9.4 for WordPress has XSS via the dbemeventreapprovedemailbody parameter to the wp-admin/edit.php?posttype=event&page=events-manager-options URI...
PT-2019-8926 · WordPress · Events Manager
Name of the Vulnerable Software and Affected Versions: Events Manager plugin version 5.9.4 Description: The issue concerns a cross-site scripting XSS problem. It is exploited via the dbem event reapproved email body parameter to the "wp-admin/edit.php?post type=event&page=events-manager-options"...
Serendipity Cross-Site Scripting Vulnerability (CNVD-2019-01717)
Serendipity is a PHP-based blogging system developed by Serendipity team. The system supports the creation of online journals, blogs, web pages and more. A cross-site scripting vulnerability exists in Serendipity version 2.0.4, which can be exploited by a remote attacker to inject arbitrary web...
PT-2018-13663
Name of the Vulnerable Software and Affected Versions Nucleus CMS version 3.70 Description The issue allows for HTML Injection via the body parameter in index.php. Recommendations For Nucleus CMS version 3.70, avoid using the body parameter in the index.php endpoint until the issue is resolved...
CVE-2018-16636: Improper Neutralization of Input During Web Page Generation
Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter...