Lucene search
+L

7 matches found

Positive Technologies
Positive Technologies
•added 2026/05/14 12:00 a.m.•37 views

PT-2026-41134

Svelte was vulnerable to DOM clobbering of its internal framework state on elements, potentially leading to XSS attacks. You are vulnerable if all of the following is true: - you are using attribute spreading on a form element - you are using attribute spreading or allow a dynamic value for the...

5.3CVSS5.9AI score0.00349EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-31111

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00436EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/20 7:15 p.m.•13 views

CVE-2022-26555

A stored cross-site scripting XSS vulnerability in the Add a Button function of Eova v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box...

5.4CVSS6.3AI score0.00436EPSS
SaveExploits1References2
OSV
OSV
•added 2022/03/20 7:15 p.m.•16 views

CVE-2022-26555

A stored cross-site scripting XSS vulnerability in the Add a Button function of Eova v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box...

5.4CVSS6.2AI score0.00436EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/20 12:00 a.m.•9 views

CVE-2022-26555: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the Add a Button function of Eova v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box...

5.4CVSS6.2AI score0.00436EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/03/20 12:00 a.m.•4 views

PT-2022-17930

Name of the Vulnerable Software and Affected Versions Eova version 1.6.0 Description A stored cross-site scripting issue in the Add a Button function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the button name text box. Recommendations For Eova...

5.4CVSS6.1AI score0.00436EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/03/20 12:00 a.m.•15 views

Eova 跨站脚本漏洞

Eova is a rapid development platform for the Eova community in China. A security vulnerability exists in Eova v1.6.0 that allows attackers to execute arbitrary web script or HTML via a specially crafted attack payload injected into the button name text box...

5.4CVSS6.1AI score0.00436EPSS
SaveExploits1References2
Rows per page
Query Builder