silverstripe/framework has Cross-site Scripting vulnerability in page history comparison

Authenticated user with page edit permission can craft HTML, which when rendered in a page history comparison can execute client scripts...

GHSA-C4C3-J73V-634R silverstripe/framework has Cross-site Scripting vulnerability in page history comparison

Authenticated user with page edit permission can craft HTML, which when rendered in a page history comparison can execute client scripts...

SARABAN 跨站脚本漏洞

Saraban is a document management system from Softvibe Thailand. It is used for transferring files and notifications to reduce unnecessary duplication.SARABAN has a cross-site scripting vulnerability in version 1.1, which stems from the lack of data validation filtering of user-supplied data and...

CVE-2020-14071

An issue was discovered in MK-AUTH 19.01. XSS vulnerabilities in admin and client scripts allow an attacker to execute arbitrary JavaScript code...

PT-2020-13876

Name of the Vulnerable Software and Affected Versions MK-AUTH version 19.01 Description An issue was discovered that allows an attacker to execute arbitrary JavaScript code due to XSS vulnerabilities in admin and client scripts. Recommendations For MK-AUTH version 19.01, update to a version that...

CVE-2020-14071: Improper Neutralization of Input During Web Page Generation

An issue was discovered in MK-AUTH 19.01. XSS vulnerabilities in admin and client scripts allow an attacker to execute arbitrary JavaScript code...