Lucene search
+L

880 matches found

CNNVD
CNNVD
added 2022/01/26 12:0 a.m.6 views

livehelperchat 跨站脚本漏洞

livehelperchat is a chat via a live helper that provides free live support on a website. A cross-site scripting vulnerability exists in livehelperchat, which stems from a lack of proper validation of client data by the WEB application in Packagist remdex/livehelperchat in 3.93. An attacker can...

6.5CVSS5.9AI score0.007EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/01/26 12:0 a.m.7 views

SPIP 跨站脚本漏洞

SPIP is a Web-based content publishing system. A cross-site scripting vulnerability exists in SPIP, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute client-side code...

5.4CVSS5.3AI score0.00772EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2022/01/22 12:0 a.m.8 views

phpMyAdmin 跨站脚本漏洞

phpMyAdmin is a free, web-based MySQL database management tool from the Phpmyadmin team. The tool is capable of creating and deleting databases, creating, deleting and modifying database tables, executing SQL script commands, etc. phpMyAdmin suffers from a cross-site scripting vulnerability that...

6.1CVSS5.5AI score0.07936EPSS
SaveExploits2References5
CNVD
CNVD
added 2022/01/20 12:0 a.m.17 views

chaskiq Cross-Site Scripting Vulnerability (CNVD-2022-08227)

Chaskiq is an open source messaging platform. It is used for marketing, support and sales. chaskiq suffers from a cross-site scripting vulnerability that stems from the fact that chaskiq is vulnerable to input errors during web page generation "cross-site scripting". An attacker could exploit thi...

7.3CVSS2.6AI score0.006EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/01/17 12:0 a.m.6 views

Chaskiq 跨站脚本漏洞

Chaskiq is an open source messaging platform. It is used for marketing, support and sales. chaskiq suffers from a cross-site scripting vulnerability that stems from the fact that chaskiq is vulnerable to input errors during web page generation "cross-site scripting". An attacker could exploit thi...

7.3CVSS5.4AI score0.006EPSS
SaveExploits1References4
CNVD
CNVD
added 2022/01/10 12:0 a.m.27 views

scratch-svg-renderer cross-site scripting vulnerability

scratch-svg-renderer is a code library used by the Scratch team to convert SVG to DOM elements. scratch-Svg-Renderer suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in WEB applications, which can be exploited to execute client-si...

6.1CVSS3.6AI score0.00647EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/01/07 12:0 a.m.25 views

Practo Technologies Insta Hms跨站脚本漏洞

Practo Technologies Insta Hms is a hospital information system from Practo Technologies, India. Practo Technologies Insta HMS has a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers to...

6.1CVSS3.9AI score0.00852EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/06 12:0 a.m.9 views

Bludit 跨站脚本漏洞

A cross-site scripting vulnerability exists in Bludit, an open source lightweight blog content management system CMS, which stems from a tag section in the product's login panel that does not validate input data. An attacker could execute client-side code through this vulnerability...

5.4CVSS5.4AI score0.01438EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/01/06 12:0 a.m.69 views

DayByDay CRM Cross-Site Scripting Vulnerability (CNVD-2022-68549)

DayByDay CRM is an open source CRM Customer Relationship Management software, based on Laravel, that helps users keep track of clients, tasks, meetings and more. A cross-site scripting vulnerability exists in DayByDay CRM. The vulnerability stems from the title field of a new task in the product...

5.4CVSS5.3AI score0.00531EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/05 12:0 a.m.9 views

Daybyday CRM 跨站脚本漏洞

DayByDay CRM is an open source CRM Customer Relationship Management software, based on Laravel, that helps users keep track of clients, tasks, meetings and more. A cross-site scripting vulnerability exists in DayByDay CRM. The vulnerability stems from the title field of a new task in the product...

5.4CVSS5.5AI score0.00531EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/01/05 12:0 a.m.31 views

Dmp Roadmap Cross-Site Scripting Vulnerability

Dmp Roadmap is a data management planning tool. a cross-site scripting vulnerability exists in Dmp Roadmap, which stems from the DMP roadmap prior to 3.0.4 and allows XSS. an attacker could exploit this vulnerability to execute client-side code...

6.1CVSS2.5AI score0.00893EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/30 12:0 a.m.43 views

livehelperchat cross-site scripting vulnerability (CNVD-2022-01684)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.6CVSS5.2AI score0.00531EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/30 12:0 a.m.44 views

livehelperchat cross-site scripting vulnerability (CNVD-2022-01685)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.1CVSS6AI score0.00785EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/29 12:0 a.m.6 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.1CVSS5.4AI score0.00785EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/12/29 12:0 a.m.6 views

livehelperchat 跨站脚本漏洞

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from the vulnerability of livehelperchat to input errors when generating web pages. An attacker can exploi...

6.6CVSS5.4AI score0.00531EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/12/29 12:0 a.m.42 views

Qibosoft Cross-Site Scripting Vulnerability

Qibosoft qibosoft is a content management system CMS from Qibosoft, China. qibosoft has a cross-site scripting vulnerability that originates in the /admin/index.php?lfj=friendlink & action=add link of the admin component of the product. The vulnerability is caused by the...

5.4CVSS3.1AI score0.00602EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/21 12:0 a.m.41 views

livehelperchat cross-site scripting vulnerability (CNVD-2022-01692)

livehelperchat is available through live helper chat and can be used to provide live support on the website for free. A cross-site scripting vulnerability exists in livehelperchat that stems from livehelperchat's susceptibility to input mismatches during web page generation "cross-site scripting"...

7.3CVSS5.2AI score0.00634EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/20 12:0 a.m.13 views

WordPress plugin Wappointment cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Wappointment. The vulnerability...

1.7AI score
SaveExploits0References1
CNNVD
CNNVD
added 2021/12/17 12:0 a.m.6 views

Nordaaker Convos 跨站脚本漏洞

Nordaaker Convos is an open source web browser-based multi-user chat application from Nordaaker, Norway. A cross-site scripting vulnerability exists in Convos-Chat that stems from a stored cross-site scripting XSS issue in Convos-Chat prior to 6.32. An attacker could exploit the vulnerability to...

5.4CVSS5.6AI score0.0073EPSS
SaveExploits1References4
CNVD
CNVD
added 2021/12/12 12:0 a.m.28 views

KNIME Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Knime, the Swiss company's enterprise software for putting data science workflows into production. knime stems from the lack of proper validation of client-side data by the WEB application, which can be exploited by attackers to execute client-side...

8.8CVSS5.1AI score0.00734EPSS
SaveExploits0References1
Rows per page
Query Builder