Froala WYSIWYG Editor Cross-site Scripting Vulnerability

Froala WYSIWYG Editor is a software application. A beautiful JavaScript web editor that is easy for developers to integrate and your users will love its clean design. Froala WYSIWYG Editor suffers from a cross-site scripting vulnerability that stems from a lack of proper validation of client-side...

Shopware cross-site scripting vulnerabilities

Shopware is a suite of open source e-commerce software from the German company Shopware.Shopware in versions prior to 5.7.6 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the...

IBM Security Risk Manager for Cp4S – Cross-Site Scripting Vulnerabilities

Ibm Security Risk Manager on Cp4S is a security risk manager from Ibm USA. A security vulnerability exists in Ibm Security Risk Manager on Cp4S, which stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute...

OMERO.web Cross-Site Scripting Vulnerability

OMERO.web is a client program from the Open Microscopy Environment team for viewing images on the OMERO server from a web browser. A cross-site scripting vulnerability exists in omero-web that stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit...

Tad Book3 Cross-Site Scripting Vulnerabilities

Tad Book3 is an XOOPS module by the individual developer of Tad in Taiwan, China, which can be used to write books, handouts, and as a notepad. Tad Book3 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An...

WordPress User Registration plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers.The WordPress plugin User Registration has a cross-site scripting vulnerability that stems from the lack of proper validation ...

in firefly-iii/firefly-iii

Description file upload vulnerability in application Proof of Concept step to reproduce 1login to application 2 goto https://demo.firefly-iii.org/create-from-bill/1 3 upload file any kind of file application accept Reference PoC 1 https://i.ibb.co/9wWRnsf/Screenshot-12.png...

WordPress plugin cross-site scripting vulnerabilities

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin Recipe Card Blocks, which stems from a lack of proper validation of client-side data in the web application. An attacker can exploit this vulnerability to execu...

Opennms Group: OpenNMS Cross-Site Scripting Vulnerability

Opennms Group OpenNMS is an open source, enterprise-grade network monitoring and network management platform from the US-based OpenNMS Group Opennms Group. OpenNMS suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB...

WordPress plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

WordPress plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Book appointment, which stems from a lack o...

WordPress plugin cross-site scripting vulnerabilities

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin Yet Another bol.com, which stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability to...

Pimcore cross-site scripting vulnerabilities

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce framework and product information management applications.Pimcore in versions prior to 10.1.2 there is...

xArrow SCADA cross-site scripting vulnerabilities

xArrow SCADA is an installer for industrial control products from xArrow in China. A cross-site scripting vulnerability exists in xArrow SCADA. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execut...

Cyberoam NetGenie cross-site scripting vulnerabilities

Cyberoam NetGenie is a router. Cyberoam NetGenie suffers from a cross-site scripting vulnerability that stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

NETGEAR RAX40 Cross-site scripting vulnerability

NETGEAR RAX40 is a 4-stream AX3000 dual-band WiFi 6 router.NETGEAR RAX40 versions prior to 1.0.3.64 are vulnerable to a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit this vulnerability to...

NavigateCMS cross-site scripting vulnerability

NavigateCMS is a content management system. NavigateCMS 2.9 suffers from a cross-site scripting vulnerability that stems from the WEB application's lack of proper validation of client-side data. An attacker can exploit the vulnerability to execute client-side code...

IBM API Connect cross-site scripting vulnerability

IBM API Connect is an integrated solution for managing the API lifecycle from IBM USA. The product supports creating, running, managing and securing APIs, microservices and more. A cross-site scripting vulnerability exists in IBM API Connect. The vulnerability stems from the lack of proper...

IBM Datacap Fastdoc Capture Cross-site Scripting Vulnerability

IBM Datacap Fastdoc Capture is a client-only capture software solution from IBM USA that automatically indexes scanned documents for accurate storage and retrieval. A cross-site scripting vulnerability exists in IBM Datacap Fastdoc Capture that stems from a lack of proper validation of client-sid...

CVE-2021-24331

The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings, such as psbdistance, psbbuttonsize, psbspeed, only validating them client side. This could allow high privilege users such as admin to set XSS payloads in them...