Canvs Canvas Cross-site Scripting (XSS) via title and content fields

cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a "Posts Add New" action, and during creation of new tags and users...

Canvs Canvas XSS Vulnerability

Canvs Canvas version 3.4.2 contains a Cross Site Scripting XSS vulnerability in User's details that can result in denial of service and execution of javascript code...

adversarial-labeller (0.1.8), autodiffing (>=0.0.6, <=0.0.7) +74 more potentially affected by CVE-2020-6817 via bleach (>=3.0.1, <=3.1.3)

bleach PYPI version =3.0.1, =0.0.6, =0.3.0, =0.0.9, =0.0.5, =0.1.0rc1, =0.0.1, =1.0.2, =0.1.2, =1.0.1.0, =1.0.2.0, =1.0.1.0, =1.0.0, =1.0.13 and more Source cves: CVE-2020-6817 Source advisory: OSV:GHSA-VQHP-CXGC-6WMM...

Canvs Canvas Cross-Site Scripting Vulnerability

Cnvs Canvas is an open source blog publishing platform. A cross-site scripting vulnerability exists in user details in Canvs Canvas version 3.4.2. A remote attacker can exploit this vulnerability to cause a denial of service and execute JavaScript code...

CVE-2017-1000507

Canvs Canvas version 3.4.2 contains a Cross Site Scripting XSS vulnerability in User's details that can result in denial of service and execution of javascript code...

CVE-2017-1000507

Canvs Canvas 3.4.2 is affected by a Cross Site Scripting (XSS) vulnerability in User’s details. The provided connected documents identify the issue but do not specify root cause details, affected subcomponents beyond the User’s details, exploit status, or a confirmed patch version. Potential impa...

CVE-2017-1000507

Canvs Canvas version 3.4.2 contains a Cross Site Scripting XSS vulnerability in User's details that can result in denial of service and execution of javascript code...

PT-2018-5271

Name of the Vulnerable Software and Affected Versions Canvs Canvas version 3.4.2 Description The issue is related to a Cross Site Scripting XSS vulnerability in the User's details section, which can lead to denial of service and execution of javascript code. Recommendations For Canvs Canvas versi...

CVE-2017-1000507: Improper Neutralization of Input During Web Page Generation

Canvs Canvas version 3.4.2 contains a Cross Site Scripting XSS vulnerability in User's details that can result in denial of service and execution of javascript code...