EUVD-2022-24506

Malicious code in bioql PyPI...

EUVD-2022-2782

Malicious code in bioql PyPI...

CVE-2022-1164

The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature...

Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability

Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search searchnom field to 1 htdocs/societe/societe.php or 2 htdocs/societe/admin/societe.php...

CVE-2022-1164

The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature...

CVE-2022-1164

The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature...

CVE-2022-1164

The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature...

Cross site scripting

The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature...

CVE-2022-1164

Consolidated details show CVE-2022-1164 affects the WordPress Wyzi Theme plugin (Wyzi < 2.4.3) with a reflected XSS in the business search feature. The issue is documented across multiple sources (e.g., CVE listing, Red Hat, CNVD, CVE CNVD aggregations) as a reflected XSS vulnerability. The NV...

Wyzi < 2.4.3 - Reflected Cross-Site Scripting (XSS)

The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature PoC https://example.com/business/?keyword=%22%3E%3Cimg%20src=x%20onerror=alert/XSS/%3Easd&wyz-loc-filter-txt;=&loc-filter-txt;=&loc-filter-lat;=&loc-filter-lng;===0...

Cross-site Scripting (XSS)

Dolibarr is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script through the Business search field in htdocs/societe/societe.php or htdocs/societe/admin/societe.php...

CVE-2015-3935

Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search searchnom field to 1 htdocs/societe/societe.php or 2 htdocs/societe/admin/societe.php...

CVE-2015-3935

Multiple cross-site scripting XSS vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search searchnom field to 1 htdocs/societe/societe.php or 2 htdocs/societe/admin/societe.php...